diff --git a/src/package-lock.json b/src/package-lock.json
index a507d27af..4a3b1aa6c 100644
--- a/src/package-lock.json
+++ b/src/package-lock.json
@@ -2110,9 +2110,9 @@
       }
     },
     "express-rate-limit": {
-      "version": "5.2.3",
-      "resolved": "https://registry.npmjs.org/express-rate-limit/-/express-rate-limit-5.2.3.tgz",
-      "integrity": "sha512-cjQH+oDrEPXxc569XvxhHC6QXqJiuBT6BhZ70X3bdAImcnHnTNMVuMAJaT0TXPoRiEErUrVPRcOTpZpM36VbOQ=="
+      "version": "5.2.5",
+      "resolved": "https://registry.npmjs.org/express-rate-limit/-/express-rate-limit-5.2.5.tgz",
+      "integrity": "sha512-fv9mf4hWRKZHVlY8ChVNYnGxa49m0zQ6CrJxNiXe2IjJPqicrqoA/JOyBbvs4ufSSLZ6NTzhtgEyLcdfbe+Q6Q=="
     },
     "express-session": {
       "version": "1.17.1",
diff --git a/src/package.json b/src/package.json
index e1af8a4bd..a56a656ac 100644
--- a/src/package.json
+++ b/src/package.json
@@ -41,7 +41,7 @@
     "etherpad-require-kernel": "1.0.9",
     "etherpad-yajsml": "0.0.4",
     "express": "4.17.1",
-    "express-rate-limit": "5.2.3",
+    "express-rate-limit": "5.2.5",
     "express-session": "1.17.1",
     "find-root": "1.1.0",
     "formidable": "1.2.2",