diff --git a/package.json b/package.json
index 638ca05cf..9cd6db5fb 100644
--- a/package.json
+++ b/package.json
@@ -38,7 +38,7 @@
     "diff-match-patch": "git+https://github.com/hackmdio/diff-match-patch.git#commit=59a9395ad9fe143e601e7ae5765ed943bdd2b11e",
     "ejs": "3.1.10",
     "express": "4.21.2",
-    "express-rate-limit": "7.4.1",
+    "express-rate-limit": "7.5.0",
     "express-session": "1.18.1",
     "file-type": "18.7.0",
     "formidable": "2.1.2",
diff --git a/yarn.lock b/yarn.lock
index 1a7b0c463..cd3551098 100644
--- a/yarn.lock
+++ b/yarn.lock
@@ -1286,7 +1286,7 @@ __metadata:
     exports-loader: "npm:1.1.1"
     expose-loader: "npm:1.0.3"
     express: "npm:4.21.2"
-    express-rate-limit: "npm:7.4.1"
+    express-rate-limit: "npm:7.5.0"
     express-session: "npm:1.18.1"
     file-loader: "npm:6.2.0"
     file-saver: "npm:2.0.5"
@@ -6467,12 +6467,12 @@ __metadata:
   languageName: node
   linkType: hard
 
-"express-rate-limit@npm:7.4.1":
-  version: 7.4.1
-  resolution: "express-rate-limit@npm:7.4.1"
+"express-rate-limit@npm:7.5.0":
+  version: 7.5.0
+  resolution: "express-rate-limit@npm:7.5.0"
   peerDependencies:
-    express: 4 || 5 || ^5.0.0-beta.1
-  checksum: 10/230cebc90d9a6baf0b471fa9039b5bf3d82f0a29dc7b304adee38eaa4803493266584108ca3d79d21993bdd45f9497c0b4eac9db8037cd3f10b19c529a9bdf66
+    express: ^4.11 || 5 || ^5.0.0-beta.1
+  checksum: 10/eff34c83bf586789933a332a339b66649e2cca95c8e977d193aa8bead577d3182ac9f0e9c26f39389287539b8038890ff023f910b54ebb506a26a2ce135b92ca
   languageName: node
   linkType: hard