diff --git a/api-server/package-lock.json b/api-server/package-lock.json
index 23bc06392542a0..fde03057ce48ad 100644
--- a/api-server/package-lock.json
+++ b/api-server/package-lock.json
@@ -7490,18 +7490,23 @@
       }
     },
     "express-validator": {
-      "version": "6.9.0",
-      "resolved": "https://registry.npmjs.org/express-validator/-/express-validator-6.9.0.tgz",
-      "integrity": "sha512-jScWCo5PwzfmgXhD7bXKWoMSMHttrsN1FpCxuuPby5umeIN1cSKaSV2vQkGinmjdWTRDKRPcU2BlWSXZxNmWYg==",
+      "version": "6.11.1",
+      "resolved": "https://registry.npmjs.org/express-validator/-/express-validator-6.11.1.tgz",
+      "integrity": "sha512-XAMdu1P6RESd8bvKtNdgNPsW+abkY6UQ2EVUqPpK6QVqieZKaLrN7W/zeFzDWZmgAy/RPEW8M4KYXMqQk6GmTA==",
       "requires": {
-        "lodash": "^4.17.20",
+        "lodash": "^4.17.21",
         "validator": "^13.5.2"
       },
       "dependencies": {
+        "lodash": {
+          "version": "4.17.21",
+          "resolved": "https://registry.npmjs.org/lodash/-/lodash-4.17.21.tgz",
+          "integrity": "sha512-v2kDEe57lecTulaDIuNTPy3Ry4gLGJ6Z1O3vE1krgXZNrsQ+LFTGHVxVjcXPs17LhbZVGedAJv8XZ1tvj5FvSg=="
+        },
         "validator": {
-          "version": "13.5.2",
-          "resolved": "https://registry.npmjs.org/validator/-/validator-13.5.2.tgz",
-          "integrity": "sha512-mD45p0rvHVBlY2Zuy3F3ESIe1h5X58GPfAtslBjY7EtTqGquZTj+VX/J4RnHWN8FKq0C9WRVt1oWAcytWRuYLQ=="
+          "version": "13.6.0",
+          "resolved": "https://registry.npmjs.org/validator/-/validator-13.6.0.tgz",
+          "integrity": "sha512-gVgKbdbHgtxpRyR8K0O6oFZPhhB5tT1jeEHZR0Znr9Svg03U0+r9DXWMrnRAB+HtCStDQKlaIZm42tVsVjqtjg=="
         }
       }
     },
diff --git a/api-server/package.json b/api-server/package.json
index aae1f2ec8afb41..a50bd40139f82c 100644
--- a/api-server/package.json
+++ b/api-server/package.json
@@ -31,7 +31,7 @@
     "dotenv": "^6.2.0",
     "express-flash": "~0.0.2",
     "express-session": "^1.17.1",
-    "express-validator": "^6.9.0",
+    "express-validator": "^6.11.1",
     "googleapis": "^42.0.0",
     "helmet": "^3.23.3",
     "helmet-csp": "^2.10.0",