diff --git a/package.json b/package.json
index fac11a0..0a6535e 100644
--- a/package.json
+++ b/package.json
@@ -39,7 +39,7 @@
     "express-csp-header": "^4.0.0",
     "express-rate-limit": "^5.1.3",
     "googleapis": "^58.0.0",
-    "helmet": "^4.0.0",
+    "helmet": "^4.6.0",
     "metaget": "^1.0.7",
     "moment": "^2.27.0",
     "mongodb": "^3.5.6",
diff --git a/yarn.lock b/yarn.lock
index 9d360e4..ad29db4 100644
--- a/yarn.lock
+++ b/yarn.lock
@@ -926,10 +926,10 @@ has-flag@^3.0.0:
   resolved "https://registry.npmjs.org/has-flag/-/has-flag-3.0.0.tgz"
   integrity "sha1-tdRU3CGZriJWmfNGfloH87lVuv0= sha512-sKJf1+ceQBr4SMkvQnBDNDtf4TXpVhVGateu0t918bl30FnbE2m4vNLX+VWe/dpjlb+HugGYzW7uQXH98HPEYw=="
 
-helmet@^4.0.0:
-  version "4.0.0"
-  resolved "https://registry.npmjs.org/helmet/-/helmet-4.0.0.tgz"
-  integrity sha512-HyoRKKHhWhO6+EBfgRLkuZR4/+NXc1nJB7x0bWwW89i9eoPciK0qUqyZNOA/zowpgrW9C4+J5toqMkZrpBOlkg==
+helmet@^4.6.0:
+  version "4.6.0"
+  resolved "https://registry.yarnpkg.com/helmet/-/helmet-4.6.0.tgz#579971196ba93c5978eb019e4e8ec0e50076b4df"
+  integrity sha512-HVqALKZlR95ROkrnesdhbbZJFi/rIVSoNq6f3jA/9u6MIbTsPh3xZwihjeI5+DO/2sOV6HMHooXcEOuwskHpTg==
 
 htmlparser2@^3.9.1:
   version "3.10.1"