diff --git a/examples/todo/package.json b/examples/todo/package.json
index 375690e5071a..1f54283ead2d 100644
--- a/examples/todo/package.json
+++ b/examples/todo/package.json
@@ -58,7 +58,7 @@
     "@loopback/rest-explorer": "^8.0.16",
     "@loopback/service-proxy": "^8.0.15",
     "loopback-connector-rest": "^7.0.3",
-    "morgan": "^1.12.0",
+    "morgan": "^1.12.1",
     "tslib": "^2.8.1"
   },
   "devDependencies": {
diff --git a/extensions/logging/package.json b/extensions/logging/package.json
index b73bea29c532..38b4ea976e94 100644
--- a/extensions/logging/package.json
+++ b/extensions/logging/package.json
@@ -45,7 +45,7 @@
   },
   "dependencies": {
     "fluent-logger": "^3.4.1",
-    "morgan": "^1.12.0",
+    "morgan": "^1.12.1",
     "tslib": "^2.8.1",
     "winston": "^3.19.0",
     "winston-transport": "^4.9.0"
diff --git a/package-lock.json b/package-lock.json
index 8aa3736c059e..0035c4ad625e 100644
--- a/package-lock.json
+++ b/package-lock.json
@@ -1219,7 +1219,7 @@
         "@loopback/rest-explorer": "^8.0.16",
         "@loopback/service-proxy": "^8.0.15",
         "loopback-connector-rest": "^7.0.3",
-        "morgan": "^1.12.0",
+        "morgan": "^1.12.1",
         "tslib": "^2.8.1"
       },
       "devDependencies": {
@@ -1784,7 +1784,7 @@
       "license": "MIT",
       "dependencies": {
         "fluent-logger": "^3.4.1",
-        "morgan": "^1.12.0",
+        "morgan": "^1.12.1",
         "tslib": "^2.8.1",
         "winston": "^3.19.0",
         "winston-transport": "^4.9.0"
@@ -26427,9 +26427,9 @@
       }
     },
     "node_modules/morgan": {
-      "version": "1.12.0",
-      "resolved": "https://registry.npmjs.org/morgan/-/morgan-1.12.0.tgz",
-      "integrity": "sha512-OHpTRQwn2ezasILW8iKe+Yww1XsfWsZIpUOLF7RDb2g5GwO3trPaRwi7+8BDiJ7HFx2Kg2mfUdCBcVhwYlOz2g==",
+      "version": "1.12.1",
+      "resolved": "https://registry.npmjs.org/morgan/-/morgan-1.12.1.tgz",
+      "integrity": "sha512-tljKC0ex20AjO58Ob/eZ53JloycbVswbVNCHx6V6VLGzqt/w8dIynVGL0G8qVjNKwiA7sYSogCrN6QtJ82IV+g==",
       "license": "MIT",
       "dependencies": {
         "basic-auth": "~2.0.1",