diff --git a/package-lock.json b/package-lock.json
index 35c90d3248..22f6dafcaa 100644
--- a/package-lock.json
+++ b/package-lock.json
@@ -22,8 +22,8 @@
         "commander": "12.0.0",
         "cors": "2.8.5",
         "deepcopy": "2.1.0",
-        "express": "^4.18.3",
-        "express-rate-limit": "6.11.2",
+        "express": "4.18.3",
+        "express-rate-limit": "^7.2.0",
         "follow-redirects": "1.15.6",
         "graphql": "16.8.1",
         "graphql-list-fields": "2.0.4",
@@ -7445,14 +7445,17 @@
       }
     },
     "node_modules/express-rate-limit": {
-      "version": "6.11.2",
-      "resolved": "https://registry.npmjs.org/express-rate-limit/-/express-rate-limit-6.11.2.tgz",
-      "integrity": "sha512-a7uwwfNTh1U60ssiIkuLFWHt4hAC5yxlLGU2VP0X4YNlyEDZAqF4tK3GD3NSitVBrCQmQ0++0uOyFOgC2y4DDw==",
+      "version": "7.2.0",
+      "resolved": "https://registry.npmjs.org/express-rate-limit/-/express-rate-limit-7.2.0.tgz",
+      "integrity": "sha512-T7nul1t4TNyfZMJ7pKRKkdeVJWa2CqB8NA1P8BwYaoDI5QSBZARv5oMS43J7b7I5P+4asjVXjb7ONuwDKucahg==",
       "engines": {
-        "node": ">= 14"
+        "node": ">= 16"
+      },
+      "funding": {
+        "url": "https://github.com/sponsors/express-rate-limit"
       },
       "peerDependencies": {
-        "express": "^4 || ^5"
+        "express": "4 || 5 || ^5.0.0-beta.1"
       }
     },
     "node_modules/express/node_modules/debug": {
@@ -25040,9 +25043,9 @@
       }
     },
     "express-rate-limit": {
-      "version": "6.11.2",
-      "resolved": "https://registry.npmjs.org/express-rate-limit/-/express-rate-limit-6.11.2.tgz",
-      "integrity": "sha512-a7uwwfNTh1U60ssiIkuLFWHt4hAC5yxlLGU2VP0X4YNlyEDZAqF4tK3GD3NSitVBrCQmQ0++0uOyFOgC2y4DDw==",
+      "version": "7.2.0",
+      "resolved": "https://registry.npmjs.org/express-rate-limit/-/express-rate-limit-7.2.0.tgz",
+      "integrity": "sha512-T7nul1t4TNyfZMJ7pKRKkdeVJWa2CqB8NA1P8BwYaoDI5QSBZARv5oMS43J7b7I5P+4asjVXjb7ONuwDKucahg==",
       "requires": {}
     },
     "ext": {
diff --git a/package.json b/package.json
index c6a382b10a..947581a1af 100644
--- a/package.json
+++ b/package.json
@@ -32,7 +32,7 @@
     "cors": "2.8.5",
     "deepcopy": "2.1.0",
     "express": "4.18.3",
-    "express-rate-limit": "6.11.2",
+    "express-rate-limit": "7.2.0",
     "follow-redirects": "1.15.6",
     "graphql": "16.8.1",
     "graphql-list-fields": "2.0.4",