diff --git a/plugins/scaffolder-backend/package.json b/plugins/scaffolder-backend/package.json
index 643e0f9166608..ef40f5a2079d8 100644
--- a/plugins/scaffolder-backend/package.json
+++ b/plugins/scaffolder-backend/package.json
@@ -50,7 +50,7 @@
     "command-exists": "^1.2.9",
     "compression": "^1.7.4",
     "cors": "^2.8.5",
-    "express": "^4.17.1",
+    "express": "^4.21.2",
     "express-promise-router": "^4.1.0",
     "fs-extra": "10.0.0",
     "git-url-parse": "^11.6.0",