diff --git a/server/package-lock.json b/server/package-lock.json
index 4e446b0c..77caeb97 100644
--- a/server/package-lock.json
+++ b/server/package-lock.json
@@ -13,7 +13,7 @@
         "better-sqlite3": "^12.11.1",
         "cors": "^2.8.5",
         "express": "^5.3.0",
-        "express-rate-limit": "^8.2.1",
+        "express-rate-limit": "^8.7.1",
         "helmet": "^8.3.0",
         "morgan": "^1.12.1",
         "parse5": "^7.3.0",
@@ -1888,9 +1888,9 @@
       }
     },
     "node_modules/express-rate-limit": {
-      "version": "8.6.0",
-      "resolved": "https://registry.npmjs.org/express-rate-limit/-/express-rate-limit-8.6.0.tgz",
-      "integrity": "sha512-XKJXDsASUOo0LLtFwW5hCcQGH0N4WQc/Rn8/Pvoia+TJFOkkFPvrtW9lZOeeNcxQJspvOIERMwiRLsVFlhHEkA==",
+      "version": "8.7.1",
+      "resolved": "https://registry.npmjs.org/express-rate-limit/-/express-rate-limit-8.7.1.tgz",
+      "integrity": "sha512-2FXbqkygil3mZiXzEtM0IjE/UBmBNot0J1GEVrJT4JbrvwOSoEtqtO+wHbiMQELWe1eNvHoYRg2dkjOid+6JkA==",
       "license": "MIT",
       "dependencies": {
         "debug": "^4.4.3",
diff --git a/server/package.json b/server/package.json
index d108b709..cc13624c 100644
--- a/server/package.json
+++ b/server/package.json
@@ -16,7 +16,7 @@
     "better-sqlite3": "^12.11.1",
     "cors": "^2.8.5",
     "express": "^5.3.0",
-    "express-rate-limit": "^8.2.1",
+    "express-rate-limit": "^8.7.1",
     "helmet": "^8.3.0",
     "morgan": "^1.12.1",
     "parse5": "^7.3.0",