diff --git a/BookingWebApi/package-lock.json b/BookingWebApi/package-lock.json
index a302ae1..14ef3e4 100644
--- a/BookingWebApi/package-lock.json
+++ b/BookingWebApi/package-lock.json
@@ -14,7 +14,7 @@
         "cors": "^2.8.5",
         "express": "^4.21.2",
         "express-fileupload": "^1.1.9",
-        "express-session": "^1.18.1",
+        "express-session": "^1.18.2",
         "mongoose": "^8.9.5",
         "nodemailer": "^6.9.9",
         "passport": "^0.6.0",
@@ -766,15 +766,16 @@
       }
     },
     "node_modules/express-session": {
-      "version": "1.18.1",
-      "resolved": "https://registry.npmjs.org/express-session/-/express-session-1.18.1.tgz",
-      "integrity": "sha512-a5mtTqEaZvBCL9A9aqkrtfz+3SMDhOVUnjafjo+s7A9Txkq+SVX2DLvSp1Zrv4uCXa3lMSK3viWnh9Gg07PBUA==",
+      "version": "1.18.2",
+      "resolved": "https://registry.npmjs.org/express-session/-/express-session-1.18.2.tgz",
+      "integrity": "sha512-SZjssGQC7TzTs9rpPDuUrR23GNZ9+2+IkA/+IJWmvQilTr5OSliEHGF+D9scbIpdC6yGtTI0/VhaHoVes2AN/A==",
+      "license": "MIT",
       "dependencies": {
         "cookie": "0.7.2",
         "cookie-signature": "1.0.7",
         "debug": "2.6.9",
         "depd": "~2.0.0",
-        "on-headers": "~1.0.2",
+        "on-headers": "~1.1.0",
         "parseurl": "~1.3.3",
         "safe-buffer": "5.2.1",
         "uid-safe": "~2.1.5"
@@ -1563,9 +1564,10 @@
       }
     },
     "node_modules/on-headers": {
-      "version": "1.0.2",
-      "resolved": "https://registry.npmjs.org/on-headers/-/on-headers-1.0.2.tgz",
-      "integrity": "sha512-pZAE+FJLoyITytdqK0U5s+FIpjN0JP3OzFi/u8Rx+EV5/W+JTWGXG8xFzevE7AjBfDqHv/8vL8qQsIhHnqRkrA==",
+      "version": "1.1.0",
+      "resolved": "https://registry.npmjs.org/on-headers/-/on-headers-1.1.0.tgz",
+      "integrity": "sha512-737ZY3yNnXy37FHkQxPzt4UZ2UWPWiCZWLvFZ4fu5cueciegX0zGPnrlY6bwRg4FdQOe9YU8MkmJwGhoMybl8A==",
+      "license": "MIT",
       "engines": {
         "node": ">= 0.8"
       }
diff --git a/BookingWebApi/package.json b/BookingWebApi/package.json
index 98be4b3..56ba81c 100644
--- a/BookingWebApi/package.json
+++ b/BookingWebApi/package.json
@@ -28,7 +28,7 @@
     "cors": "^2.8.5",
     "express": "^4.21.2",
     "express-fileupload": "^1.1.9",
-    "express-session": "^1.18.1",
+    "express-session": "^1.18.2",
     "mongoose": "^8.9.5",
     "nodemailer": "^6.9.9",
     "passport": "^0.6.0",