diff --git a/samples/todo-app/frontend/package-lock.json b/samples/todo-app/frontend/package-lock.json
index 78f45ea..3148193 100644
--- a/samples/todo-app/frontend/package-lock.json
+++ b/samples/todo-app/frontend/package-lock.json
@@ -498,9 +498,9 @@
             "integrity": "sha512-nTjqfcBFEipKdXCv4YDQWCfmcLZKm81ldF0pAopTvyrFGVbcR6P/VAAd5G7N+0tTr8QqiU0tFadD6FK4NtJwOA=="
         },
         "cookie": {
-            "version": "0.6.0",
-            "resolved": "https://registry.npmjs.org/cookie/-/cookie-0.6.0.tgz",
-            "integrity": "sha512-U71cyTamuh1CRNCfpGY6to28lxvNwPG4Guz/EVjgf3Jmzv0vlDp1atT9eS5dDjMYHucpHbWns6Lwf3BKz6svdw=="
+            "version": "0.7.1",
+            "resolved": "https://registry.npmjs.org/cookie/-/cookie-0.7.1.tgz",
+            "integrity": "sha512-6DnInpx7SJ2AK3+CTUE/ZM0vWTUboZCegxhC2xiIydHR9jNuTAASBrfEpHhiGOZw/nX51bHt6YQl8jsGo4y/0w=="
         },
         "cookie-signature": {
             "version": "1.2.1",
@@ -674,15 +674,15 @@
             "integrity": "sha512-aIL5Fx7mawVa300al2BnEE4iNvo1qETxLrPI/o05L7z6go7fCw1J6EQmbK4FmJ2AS7kgVF/KEZWufBfdClMcPg=="
         },
         "express": {
-            "version": "5.0.0",
-            "resolved": "https://registry.npmjs.org/express/-/express-5.0.0.tgz",
-            "integrity": "sha512-V4UkHQc+B7ldh1YC84HCXHwf60M4BOMvp9rkvTUWCK5apqDC1Esnbid4wm6nFyVuDy8XMfETsJw5lsIGBWyo0A==",
+            "version": "5.0.1",
+            "resolved": "https://registry.npmjs.org/express/-/express-5.0.1.tgz",
+            "integrity": "sha512-ORF7g6qGnD+YtUG9yx4DFoqCShNMmUKiXuT5oWMHiOvt/4WFbHC6yCwQMTSBMno7AqntNCAzzcnnjowRkTL9eQ==",
             "requires": {
                 "accepts": "^2.0.0",
                 "body-parser": "^2.0.1",
                 "content-disposition": "^1.0.0",
                 "content-type": "~1.0.4",
-                "cookie": "0.6.0",
+                "cookie": "0.7.1",
                 "cookie-signature": "^1.2.1",
                 "debug": "4.3.6",
                 "depd": "2.0.0",
@@ -1563,9 +1563,9 @@
             "integrity": "sha1-zg6+ql94yxiSXqfYENe1mwEP1RU="
         },
         "path-to-regexp": {
-            "version": "8.1.0",
-            "resolved": "https://registry.npmjs.org/path-to-regexp/-/path-to-regexp-8.1.0.tgz",
-            "integrity": "sha512-Bqn3vc8CMHty6zuD+tG23s6v2kwxslHEhTj4eYaVKGIEB+YX/2wd0/rgXLFD9G9id9KCtbVy/3ZgmvZjpa0UdQ=="
+            "version": "8.2.0",
+            "resolved": "https://registry.npmjs.org/path-to-regexp/-/path-to-regexp-8.2.0.tgz",
+            "integrity": "sha512-TdrF7fW9Rphjq4RjrW0Kp2AW0Ahwu9sRGTkS6bvDi0SCwZlEZYmcfDbEsTz8RVk0EHIS/Vd1bv3JhG+1xZuAyQ=="
         },
         "performance-now": {
             "version": "2.1.0",
diff --git a/samples/todo-app/frontend/package.json b/samples/todo-app/frontend/package.json
index f91f2b7..04c07c0 100644
--- a/samples/todo-app/frontend/package.json
+++ b/samples/todo-app/frontend/package.json
@@ -8,7 +8,7 @@
         "@zeit/next-css": "^1.0.1",
         "body-parser": "^1.20.3",
         "classnames": "^2.2.6",
-        "express": "^5.0.0",
+        "express": "^5.0.1",
         "isomorphic-fetch": "^3.0.0",
         "mongodb": "^3.5.8",
         "next": "^14.2.10",