diff --git a/package.json b/package.json
index 988c0a86c..fd1d68320 100644
--- a/package.json
+++ b/package.json
@@ -31,7 +31,7 @@
     "compression": "1.7.4",
     "connect-flash": "0.1.1",
     "connect-session-sequelize": "7.1.7",
-    "cookie": "0.5.0",
+    "cookie": "0.6.0",
     "cookie-parser": "1.4.6",
     "deep-freeze": "0.0.1",
     "diff-match-patch": "git+https://github.com/hackmdio/diff-match-patch.git",
diff --git a/yarn.lock b/yarn.lock
index 5893f301d..e0dbff38d 100644
--- a/yarn.lock
+++ b/yarn.lock
@@ -1208,7 +1208,7 @@ __metadata:
     compression: 1.7.4
     connect-flash: 0.1.1
     connect-session-sequelize: 7.1.7
-    cookie: 0.5.0
+    cookie: 0.6.0
     cookie-parser: 1.4.6
     copy-webpack-plugin: 6.4.1
     css-loader: 5.2.7
@@ -3954,6 +3954,13 @@ __metadata:
   languageName: node
   linkType: hard
 
+"cookie@npm:0.6.0":
+  version: 0.6.0
+  resolution: "cookie@npm:0.6.0"
+  checksum: f56a7d32a07db5458e79c726b77e3c2eff655c36792f2b6c58d351fb5f61531e5b1ab7f46987150136e366c65213cbe31729e02a3eaed630c3bf7334635fb410
+  languageName: node
+  linkType: hard
+
 "cookiejar@npm:2.0.6":
   version: 2.0.6
   resolution: "cookiejar@npm:2.0.6"