diff --git a/History.md b/History.md
index 887a38f182..7fdc536ab0 100644
--- a/History.md
+++ b/History.md
@@ -1,3 +1,7 @@
+unreleased
+==========
+  * deps: qs@6.13.0
+
 4.20.0 / 2024-09-10
 ==========
   * deps: serve-static@0.16.0
diff --git a/package.json b/package.json
index bffa70a6f1..46907051ac 100644
--- a/package.json
+++ b/package.json
@@ -49,7 +49,7 @@
     "parseurl": "~1.3.3",
     "path-to-regexp": "0.1.10",
     "proxy-addr": "~2.0.7",
-    "qs": "6.11.0",
+    "qs": "6.13.0",
     "range-parser": "~1.2.1",
     "safe-buffer": "5.2.1",
     "send": "0.19.0",