diff --git a/api-server/package-lock.json b/api-server/package-lock.json
index 23bc06392542a0..93e8297b66cd7f 100644
--- a/api-server/package-lock.json
+++ b/api-server/package-lock.json
@@ -7490,18 +7490,23 @@
       }
     },
     "express-validator": {
-      "version": "6.9.0",
-      "resolved": "https://registry.npmjs.org/express-validator/-/express-validator-6.9.0.tgz",
-      "integrity": "sha512-jScWCo5PwzfmgXhD7bXKWoMSMHttrsN1FpCxuuPby5umeIN1cSKaSV2vQkGinmjdWTRDKRPcU2BlWSXZxNmWYg==",
+      "version": "6.15.0",
+      "resolved": "https://registry.npmjs.org/express-validator/-/express-validator-6.15.0.tgz",
+      "integrity": "sha512-r05VYoBL3i2pswuehoFSy+uM8NBuVaY7avp5qrYjQBDzagx2Z5A77FZqPT8/gNLF3HopWkIzaTFaC4JysWXLqg==",
       "requires": {
-        "lodash": "^4.17.20",
-        "validator": "^13.5.2"
+        "lodash": "^4.17.21",
+        "validator": "^13.9.0"
       },
       "dependencies": {
+        "lodash": {
+          "version": "4.17.21",
+          "resolved": "https://registry.npmjs.org/lodash/-/lodash-4.17.21.tgz",
+          "integrity": "sha512-v2kDEe57lecTulaDIuNTPy3Ry4gLGJ6Z1O3vE1krgXZNrsQ+LFTGHVxVjcXPs17LhbZVGedAJv8XZ1tvj5FvSg=="
+        },
         "validator": {
-          "version": "13.5.2",
-          "resolved": "https://registry.npmjs.org/validator/-/validator-13.5.2.tgz",
-          "integrity": "sha512-mD45p0rvHVBlY2Zuy3F3ESIe1h5X58GPfAtslBjY7EtTqGquZTj+VX/J4RnHWN8FKq0C9WRVt1oWAcytWRuYLQ=="
+          "version": "13.9.0",
+          "resolved": "https://registry.npmjs.org/validator/-/validator-13.9.0.tgz",
+          "integrity": "sha512-B+dGG8U3fdtM0/aNK4/X8CXq/EcxU2WPrPEkJGslb47qyHsxmbggTWK0yEA4qnYVNF+nxNlN88o14hIcPmSIEA=="
         }
       }
     },
diff --git a/api-server/package.json b/api-server/package.json
index aae1f2ec8afb41..de411a29440d80 100644
--- a/api-server/package.json
+++ b/api-server/package.json
@@ -31,7 +31,7 @@
     "dotenv": "^6.2.0",
     "express-flash": "~0.0.2",
     "express-session": "^1.17.1",
-    "express-validator": "^6.9.0",
+    "express-validator": "^6.15.0",
     "googleapis": "^42.0.0",
     "helmet": "^3.23.3",
     "helmet-csp": "^2.10.0",