diff --git a/package.json b/package.json
index 01dd38ab1..d91081835 100644
--- a/package.json
+++ b/package.json
@@ -4,7 +4,7 @@
   "version": "1.27.0",
   "dependencies": {
     "chainpad-server": "^2.0.0",
-    "express": "~4.10.1",
+    "express": "~4.16.0",
     "nthen": "~0.1.0",
     "pull-stream": "^3.6.1",
     "replify": "^1.2.0",