diff --git a/package-lock.json b/package-lock.json
index 8ca8a6d1d5..d50063ac06 100644
--- a/package-lock.json
+++ b/package-lock.json
@@ -12,7 +12,7 @@
         "bcrypt-nodejs": "0.0.3",
         "body-parser": "^1.15.1",
         "consolidate": "^0.14.1",
-        "csurf": "^1.8.3",
+        "csurf": "^1.11.0",
         "dont-sniff-mimetype": "^1.0.0",
         "express": "^4.19.2",
         "express-session": "^1.13.0",
diff --git a/package.json b/package.json
index 9703e6459b..4d5fd928f4 100644
--- a/package.json
+++ b/package.json
@@ -8,7 +8,7 @@
     "bcrypt-nodejs": "0.0.3",
     "body-parser": "^1.15.1",
     "consolidate": "^0.14.1",
-    "csurf": "^1.8.3",
+    "csurf": "^1.11.0",
     "dont-sniff-mimetype": "^1.0.0",
     "express": "^4.19.2",
     "express-session": "^1.13.0",