diff --git a/appengine/pubsub/package.json b/appengine/pubsub/package.json
index 9993a90c5c..2ef4e57a8d 100644
--- a/appengine/pubsub/package.json
+++ b/appengine/pubsub/package.json
@@ -15,7 +15,7 @@
   "dependencies": {
     "@google-cloud/pubsub": "0.13.2",
     "body-parser": "1.17.2",
-    "express": "4.15.4",
+    "express": "4.20.0",
     "pug": "2.0.0-rc.3",
     "safe-buffer": "5.1.1"
   },