diff --git a/packages/amplify-appsync-simulator/package.json b/packages/amplify-appsync-simulator/package.json
index eee32f04a3..1c5ebcf847 100644
--- a/packages/amplify-appsync-simulator/package.json
+++ b/packages/amplify-appsync-simulator/package.json
@@ -39,7 +39,7 @@
     "chalk": "^4.1.1",
     "cors": "^2.8.5",
     "dataloader": "^2.0.0",
-    "express": "^4.21.1",
+    "express": "^4.21.2",
     "get-port": "^5.1.1",
     "graphql": "^15.5.0",
     "graphql-iso-date": "^3.6.1",
diff --git a/packages/amplify-storage-simulator/package.json b/packages/amplify-storage-simulator/package.json
index 809d2c1ec3..10ff5e3e54 100644
--- a/packages/amplify-storage-simulator/package.json
+++ b/packages/amplify-storage-simulator/package.json
@@ -26,7 +26,7 @@
     "body-parser": "^1.19.2",
     "cors": "^2.8.5",
     "etag": "^1.8.1",
-    "express": "^4.21.1",
+    "express": "^4.21.2",
     "fs-extra": "^8.1.0",
     "glob": "^7.2.0",
     "object-to-xml": "^2.0.0",
diff --git a/yarn.lock b/yarn.lock
index 2e5c9dc4b3..f33fd8e452 100644
--- a/yarn.lock
+++ b/yarn.lock
@@ -118,7 +118,7 @@ __metadata:
     chalk: ^4.1.1
     cors: ^2.8.5
     dataloader: ^2.0.0
-    express: ^4.21.1
+    express: ^4.21.2
     get-port: ^5.1.1
     graphql: ^15.5.0
     graphql-iso-date: ^3.6.1
@@ -11881,7 +11881,7 @@ __metadata:
     body-parser: ^1.19.2
     cors: ^2.8.5
     etag: ^1.8.1
-    express: ^4.21.1
+    express: ^4.21.2
     fs-extra: ^8.1.0
     glob: ^7.2.0
     object-to-xml: ^2.0.0
@@ -17299,9 +17299,9 @@ __metadata:
   languageName: node
   linkType: hard
 
-"express@npm:^4.17.3, express@npm:^4.21.1":
-  version: 4.21.1
-  resolution: "express@npm:4.21.1"
+"express@npm:^4.17.3, express@npm:^4.21.2":
+  version: 4.21.2
+  resolution: "express@npm:4.21.2"
   dependencies:
     accepts: ~1.3.8
     array-flatten: 1.1.1
@@ -17322,7 +17322,7 @@ __metadata:
     methods: ~1.1.2
     on-finished: 2.4.1
     parseurl: ~1.3.3
-    path-to-regexp: 0.1.10
+    path-to-regexp: 0.1.12
     proxy-addr: ~2.0.7
     qs: 6.13.0
     range-parser: ~1.2.1
@@ -17334,7 +17334,7 @@ __metadata:
     type-is: ~1.6.18
     utils-merge: 1.0.1
     vary: ~1.1.2
-  checksum: 0c287867e5f6129d3def1edd9b63103a53c40d4dc8628839d4b6827e35eb8f0de5a4656f9d85f4457eba584f9871ebb2ad26c750b36bd75d9bbb8bcebdc4892c
+  checksum: 38168fd0a32756600b56e6214afecf4fc79ec28eca7f7a91c2ab8d50df4f47562ca3f9dee412da7f5cea6b1a1544b33b40f9f8586dbacfbdada0fe90dbb10a1f
   languageName: node
   linkType: hard
 
@@ -24690,10 +24690,10 @@ __metadata:
   languageName: node
   linkType: hard
 
-"path-to-regexp@npm:0.1.10":
-  version: 0.1.10
-  resolution: "path-to-regexp@npm:0.1.10"
-  checksum: 34196775b9113ca6df88e94c8d83ba82c0e1a2063dd33bfe2803a980da8d49b91db8104f49d5191b44ea780d46b8670ce2b7f4a5e349b0c48c6779b653f1afe4
+"path-to-regexp@npm:0.1.12":
+  version: 0.1.12
+  resolution: "path-to-regexp@npm:0.1.12"
+  checksum: 1c6ff10ca169b773f3bba943bbc6a07182e332464704572962d277b900aeee81ac6aa5d060ff9e01149636c30b1f63af6e69dd7786ba6e0ddb39d4dee1f0645b
   languageName: node
   linkType: hard