diff --git a/plugins/azure-devops-backend/package.json b/plugins/azure-devops-backend/package.json
index 379daeabbeda4..4511ec9bcc3e2 100644
--- a/plugins/azure-devops-backend/package.json
+++ b/plugins/azure-devops-backend/package.json
@@ -25,7 +25,7 @@
     "@backstage/plugin-azure-devops-common": "^0.2.0",
     "@types/express": "^4.17.6",
     "azure-devops-node-api": "^11.0.1",
-    "express": "^4.17.1",
+    "express": "^4.21.2",
     "express-promise-router": "^4.1.0",
     "p-limit": "^3.1.0",
     "winston": "^3.2.1",