diff --git a/package.json b/package.json
index 285b7d14..d3cf967a 100644
--- a/package.json
+++ b/package.json
@@ -32,7 +32,7 @@
     "cross-spawn": "^7.0.2",
     "csv-string": "^4.0.1",
     "dotenv": "^17.1.0",
-    "express": "^4.21.2",
+    "express": "^5.1.0",
     "express-session": "^1.17.2",
     "fancy-log": "^2.0.0",
     "govuk-frontend": "^5.5.0",