diff --git a/package-lock.json b/package-lock.json
index 4cdd9b2a..8e3ee06c 100644
--- a/package-lock.json
+++ b/package-lock.json
@@ -140,9 +140,9 @@
 			}
 		},
 		"@koa/cors": {
-			"version": "3.1.0",
-			"resolved": "https://registry.npmjs.org/@koa/cors/-/cors-3.1.0.tgz",
-			"integrity": "sha512-7ulRC1da/rBa6kj6P4g2aJfnET3z8Uf3SWu60cjbtxTA5g8lxRdX/Bd2P92EagGwwAhANeNw8T8if99rJliR6Q==",
+			"version": "5.0.0",
+			"resolved": "https://registry.npmjs.org/@koa/cors/-/cors-5.0.0.tgz",
+			"integrity": "sha512-x/iUDjcS90W69PryLDIMgFyV21YLTnG9zOpPXS7Bkt2b8AsY3zZsIpOLBkYr9fBcF3HbkKaER5hOBZLfpLgYNw==",
 			"requires": {
 				"vary": "^1.1.2"
 			}
diff --git a/package.json b/package.json
index 743b1c1b..0d85b414 100644
--- a/package.json
+++ b/package.json
@@ -46,7 +46,7 @@
 	},
 	"mod-project-name": "vpdb",
 	"dependencies": {
-		"@koa/cors": "3.1.0",
+		"@koa/cors": "5.0.0",
 		"@slack/client": "5.0.2",
 		"acl": "0.4.11",
 		"adm-zip": "0.4.16",