diff --git a/package-lock.json b/package-lock.json
index b785968a6..0f287e3de 100644
--- a/package-lock.json
+++ b/package-lock.json
@@ -12905,7 +12905,7 @@
       "version": "0.1.0",
       "license": "Apache-2.0",
       "dependencies": {
-        "cookie": "^1.1.1",
+        "cookie": "^2.0.1",
         "cookie-parser": "^1.4.6",
         "ejs": "^6.0.1",
         "express": "^5.2.1",
@@ -12916,6 +12916,19 @@
         "@types/ejs": "^3.1.5",
         "@types/express": "^5.0.6"
       }
+    },
+    "server/node_modules/cookie": {
+      "version": "2.0.1",
+      "resolved": "https://registry.npmjs.org/cookie/-/cookie-2.0.1.tgz",
+      "integrity": "sha512-yuToqVvRrj6pfDXREyQAAv8SkAEk/8GS3jQRTiUMm66TVtBYmqQeoEjL2Lmq8Rpo6271vH76InTChTitEAm65w==",
+      "license": "MIT",
+      "engines": {
+        "node": ">=22"
+      },
+      "funding": {
+        "type": "opencollective",
+        "url": "https://opencollective.com/express"
+      }
     }
   }
 }
diff --git a/server/package.json b/server/package.json
index 52d95cb97..2148f0dc1 100644
--- a/server/package.json
+++ b/server/package.json
@@ -17,7 +17,7 @@
     "start": "npm run build && node --enable-source-maps dist/index.js"
   },
   "dependencies": {
-    "cookie": "^1.1.1",
+    "cookie": "^2.0.1",
     "cookie-parser": "^1.4.6",
     "ejs": "^6.0.1",
     "express": "^5.2.1",