diff --git a/package-lock.json b/package-lock.json
index 047005ef..fd972075 100644
--- a/package-lock.json
+++ b/package-lock.json
@@ -7313,10 +7313,11 @@
       "integrity": "sha1-tf1UIgqivFq1eqtxQMlAdUUDwac="
     },
     "cors": {
-      "version": "2.8.0",
-      "resolved": "https://registry.npmjs.org/cors/-/cors-2.8.0.tgz",
-      "integrity": "sha1-YmKIikn5zkxdGJ0p4dVxCrc+aoU=",
+      "version": "2.8.5",
+      "resolved": "https://registry.npmjs.org/cors/-/cors-2.8.5.tgz",
+      "integrity": "sha512-KIHbLJqu73RGr/hnbrO9uBeixNGuvSQjul/jdFvS/KFSIH1hWVd1ng7zOHx+YrEfInLG7q4n6GHQ9cDtxv/P6g==",
       "requires": {
+        "object-assign": "^4",
         "vary": "^1"
       }
     },
diff --git a/package.json b/package.json
index 67f74afc..50c736e4 100644
--- a/package.json
+++ b/package.json
@@ -21,7 +21,7 @@
     "apollo-server": "2.25.3",
     "apollo-server-express": "2.25.3",
     "cookie-parser": "^1.4.6",
-    "cors": "2.8.0",
+    "cors": "2.8.5",
     "cron": "1.8.2",
     "date-fns": "2.28.0",
     "dotenv": "8.2.0",