diff --git a/src/package-lock.json b/src/package-lock.json
index 3738ff07311..8c466d59966 100644
--- a/src/package-lock.json
+++ b/src/package-lock.json
@@ -1990,9 +1990,9 @@
       }
     },
     "express-rate-limit": {
-      "version": "7.1.3",
-      "resolved": "https://registry.npmjs.org/express-rate-limit/-/express-rate-limit-7.1.3.tgz",
-      "integrity": "sha512-BDes6WeNYSGRRGQU8QDNwUnwqaBro28HN/TTweM3RlxXRHDld8RLoH7tbfCxAc0hamQyn6aL0KrfR45+ZxknYg=="
+      "version": "7.1.4",
+      "resolved": "https://registry.npmjs.org/express-rate-limit/-/express-rate-limit-7.1.4.tgz",
+      "integrity": "sha512-mv/6z+EwnWpr+MjGVavMGvM4Tl8S/tHmpl9ZsDfrQeHpYy4Hfr0UYdKEf9OOTe280oIr70yPxLRmQ6MfINfJDw=="
     },
     "express-session": {
       "version": "npm:@etherpad/express-session@1.18.2",
diff --git a/src/package.json b/src/package.json
index 748f58d20a8..e5d6f18cad7 100644
--- a/src/package.json
+++ b/src/package.json
@@ -39,7 +39,7 @@
     "etherpad-require-kernel": "^1.0.15",
     "etherpad-yajsml": "0.0.12",
     "express": "4.18.2",
-    "express-rate-limit": "^7.1.3",
+    "express-rate-limit": "^7.1.4",
     "express-session": "npm:@etherpad/express-session@^1.18.2",
     "fast-deep-equal": "^3.1.3",
     "find-root": "1.1.0",