diff --git a/apps/api/package.json b/apps/api/package.json
index e5242004..6a01cb44 100644
--- a/apps/api/package.json
+++ b/apps/api/package.json
@@ -21,12 +21,12 @@
     "compression": "1.8.1",
     "config": "4.1.1",
     "cors": "2.8.5",
-    "express": "5.2.0"
+    "express": "5.2.1"
   },
   "devDependencies": {
     "@types/compression": "1.8.1",
     "@types/cors": "2.8.19",
-    "@types/express": "5.0.5",
+    "@types/express": "5.0.6",
     "@types/supertest": "^6.0.3",
     "nodemon": "3.1.11",
     "supertest": "^7.1.4"
diff --git a/apps/web/package.json b/apps/web/package.json
index c12865c6..e292d6ae 100644
--- a/apps/web/package.json
+++ b/apps/web/package.json
@@ -35,7 +35,7 @@
     "connect-redis": "9.0.0",
     "cookie-parser": "1.4.7",
     "dotenv": "17.2.3",
-    "express": "5.2.0",
+    "express": "5.2.1",
     "express-session": "1.18.2",
     "glob": "13.0.0",
     "govuk-frontend": "5.13.0",
@@ -48,7 +48,7 @@
     "@types/compression": "1.8.1",
     "@types/config": "3.3.5",
     "@types/cookie-parser": "1.4.10",
-    "@types/express": "5.0.5",
+    "@types/express": "5.0.6",
     "@types/express-session": "1.18.2",
     "@types/govuk-frontend": "5.11.0",
     "@types/nunjucks": "3.2.6",
diff --git a/libs/api/package.json b/libs/api/package.json
index 53bb7777..0d370b52 100644
--- a/libs/api/package.json
+++ b/libs/api/package.json
@@ -32,7 +32,7 @@
     "express": "^5.1.0"
   },
   "devDependencies": {
-    "@types/express": "5.0.0",
+    "@types/express": "5.0.6",
     "typescript": "5.9.3",
     "vitest": "4.0.16"
   }
diff --git a/libs/auth/package.json b/libs/auth/package.json
index 03455a9a..939d5e3f 100644
--- a/libs/auth/package.json
+++ b/libs/auth/package.json
@@ -34,7 +34,7 @@
     "passport-azure-ad": "4.3.5"
   },
   "devDependencies": {
-    "@types/express": "5.0.5",
+    "@types/express": "5.0.6",
     "@types/express-session": "1.18.2",
     "@types/passport": "1.0.17"
   }
diff --git a/libs/cloud-native-platform/package.json b/libs/cloud-native-platform/package.json
index b649f057..76ec7640 100644
--- a/libs/cloud-native-platform/package.json
+++ b/libs/cloud-native-platform/package.json
@@ -29,7 +29,7 @@
     "js-yaml": "^4.1.0"
   },
   "devDependencies": {
-    "@types/express": "5.0.5",
+    "@types/express": "5.0.6",
     "@types/js-yaml": "^4.0.9"
   }
 }
diff --git a/libs/simple-router/package.json b/libs/simple-router/package.json
index f60e8ca5..fdabc137 100644
--- a/libs/simple-router/package.json
+++ b/libs/simple-router/package.json
@@ -22,6 +22,6 @@
     "express": "^5.1.0"
   },
   "devDependencies": {
-    "@types/express": "5.0.5"
+    "@types/express": "5.0.6"
   }
 }
diff --git a/libs/system-admin-pages/package.json b/libs/system-admin-pages/package.json
index 5c0ae350..78383763 100644
--- a/libs/system-admin-pages/package.json
+++ b/libs/system-admin-pages/package.json
@@ -33,7 +33,7 @@
     "papaparse": "5.5.3"
   },
   "devDependencies": {
-    "@types/express": "5.0.5",
+    "@types/express": "5.0.6",
     "@types/express-session": "1.18.2",
     "@types/papaparse": "5.5.2"
   }
diff --git a/libs/web-core/package.json b/libs/web-core/package.json
index ec637ee1..fa48ada8 100644
--- a/libs/web-core/package.json
+++ b/libs/web-core/package.json
@@ -87,7 +87,7 @@
     }
   },
   "devDependencies": {
-    "@types/express": "5.0.5",
+    "@types/express": "5.0.6",
     "@types/express-session": "1.18.2",
     "@types/multer": "2.0.0",
     "@types/nunjucks": "3.2.6",
diff --git a/yarn.lock b/yarn.lock
index d9351c23..bdf6acec 100644
--- a/yarn.lock
+++ b/yarn.lock
@@ -1006,12 +1006,12 @@ __metadata:
     "@hmcts/simple-router": "workspace:*"
     "@types/compression": "npm:1.8.1"
     "@types/cors": "npm:2.8.19"
-    "@types/express": "npm:5.0.5"
+    "@types/express": "npm:5.0.6"
     "@types/supertest": "npm:^6.0.3"
     compression: "npm:1.8.1"
     config: "npm:4.1.1"
     cors: "npm:2.8.5"
-    express: "npm:5.2.0"
+    express: "npm:5.2.1"
     nodemon: "npm:3.1.11"
     supertest: "npm:^7.1.4"
   languageName: unknown
@@ -1023,7 +1023,7 @@ __metadata:
   dependencies:
     "@hmcts/account": "npm:*"
     "@microsoft/microsoft-graph-client": "npm:3.0.7"
-    "@types/express": "npm:5.0.5"
+    "@types/express": "npm:5.0.6"
     "@types/express-session": "npm:1.18.2"
     "@types/passport": "npm:1.0.17"
     passport-azure-ad: "npm:4.3.5"
@@ -1042,7 +1042,7 @@ __metadata:
     "@hmcts/location": "workspace:*"
     "@hmcts/postgres": "workspace:*"
     "@hmcts/publication": "workspace:*"
-    "@types/express": "npm:5.0.0"
+    "@types/express": "npm:5.0.6"
     typescript: "npm:5.9.3"
     vitest: "npm:4.0.16"
   peerDependencies:
@@ -1093,7 +1093,7 @@ __metadata:
   dependencies:
     "@azure/identity": "npm:^4.2.1"
     "@azure/keyvault-secrets": "npm:^4.7.0"
-    "@types/express": "npm:5.0.5"
+    "@types/express": "npm:5.0.6"
     "@types/js-yaml": "npm:^4.0.9"
     applicationinsights: "npm:3.12.1"
     js-yaml: "npm:^4.1.0"
@@ -1190,7 +1190,7 @@ __metadata:
   version: 0.0.0-use.local
   resolution: "@hmcts/simple-router@workspace:libs/simple-router"
   dependencies:
-    "@types/express": "npm:5.0.5"
+    "@types/express": "npm:5.0.6"
   peerDependencies:
     express: ^5.1.0
   languageName: unknown
@@ -1214,7 +1214,7 @@ __metadata:
   dependencies:
     "@hmcts/auth": "workspace:*"
     "@hmcts/web-core": "workspace:*"
-    "@types/express": "npm:5.0.5"
+    "@types/express": "npm:5.0.6"
     "@types/express-session": "npm:1.18.2"
     "@types/papaparse": "npm:5.5.2"
     papaparse: "npm:5.5.3"
@@ -1237,7 +1237,7 @@ __metadata:
   version: 0.0.0-use.local
   resolution: "@hmcts/web-core@workspace:libs/web-core"
   dependencies:
-    "@types/express": "npm:5.0.5"
+    "@types/express": "npm:5.0.6"
     "@types/express-session": "npm:1.18.2"
     "@types/multer": "npm:2.0.0"
     "@types/nunjucks": "npm:3.2.6"
@@ -1290,7 +1290,7 @@ __metadata:
     "@types/compression": "npm:1.8.1"
     "@types/config": "npm:3.3.5"
     "@types/cookie-parser": "npm:1.4.10"
-    "@types/express": "npm:5.0.5"
+    "@types/express": "npm:5.0.6"
     "@types/express-session": "npm:1.18.2"
     "@types/govuk-frontend": "npm:5.11.0"
     "@types/nunjucks": "npm:3.2.6"
@@ -1301,7 +1301,7 @@ __metadata:
     connect-redis: "npm:9.0.0"
     cookie-parser: "npm:1.4.7"
     dotenv: "npm:17.2.3"
-    express: "npm:5.2.0"
+    express: "npm:5.2.1"
     express-session: "npm:1.18.2"
     glob: "npm:13.0.0"
     govuk-frontend: "npm:5.13.0"
@@ -2734,26 +2734,14 @@ __metadata:
   languageName: node
   linkType: hard
 
-"@types/express@npm:5.0.0":
-  version: 5.0.0
-  resolution: "@types/express@npm:5.0.0"
+"@types/express@npm:5.0.6":
+  version: 5.0.6
+  resolution: "@types/express@npm:5.0.6"
   dependencies:
     "@types/body-parser": "npm:*"
     "@types/express-serve-static-core": "npm:^5.0.0"
-    "@types/qs": "npm:*"
-    "@types/serve-static": "npm:*"
-  checksum: 10c0/0d74b53aefa69c3b3817ee9b5145fd50d7dbac52a8986afc2d7500085c446656d0b6dc13158c04e2d9f18f4324d4d93b0452337c5ff73dd086dca3e4ff11f47b
-  languageName: node
-  linkType: hard
-
-"@types/express@npm:5.0.5":
-  version: 5.0.5
-  resolution: "@types/express@npm:5.0.5"
-  dependencies:
-    "@types/body-parser": "npm:*"
-    "@types/express-serve-static-core": "npm:^5.0.0"
-    "@types/serve-static": "npm:^1"
-  checksum: 10c0/e96da91c121b43e0e84301a4cfe165908382d016234c11213aeb4f7401cf1a8694e16e3947d21b5c20b3389358d48d60a8c5c38657e041726ac9e8c884d2b8f0
+    "@types/serve-static": "npm:^2"
+  checksum: 10c0/f1071e3389a955d4f9a38aae38634121c7cd9b3171ba4201ec9b56bd534aba07866839d278adc0dda05b942b05a901a02fd174201c3b1f70ce22b10b6c68f24b
   languageName: node
   linkType: hard
 
@@ -3018,6 +3006,16 @@ __metadata:
   languageName: node
   linkType: hard
 
+"@types/serve-static@npm:^2":
+  version: 2.2.0
+  resolution: "@types/serve-static@npm:2.2.0"
+  dependencies:
+    "@types/http-errors": "npm:*"
+    "@types/node": "npm:*"
+  checksum: 10c0/a3c6126bdbf9685e6c7dc03ad34639666eff32754e912adeed9643bf3dd3aa0ff043002a7f69039306e310d233eb8e160c59308f95b0a619f32366bbc48ee094
+  languageName: node
+  linkType: hard
+
 "@types/shimmer@npm:^1.2.0":
   version: 1.2.0
   resolution: "@types/shimmer@npm:1.2.0"
@@ -4672,9 +4670,9 @@ __metadata:
   languageName: node
   linkType: hard
 
-"express@npm:5.2.0":
-  version: 5.2.0
-  resolution: "express@npm:5.2.0"
+"express@npm:5.2.1":
+  version: 5.2.1
+  resolution: "express@npm:5.2.1"
   dependencies:
     accepts: "npm:^2.0.0"
     body-parser: "npm:^2.2.1"
@@ -4704,7 +4702,7 @@ __metadata:
     statuses: "npm:^2.0.1"
     type-is: "npm:^2.0.1"
     vary: "npm:^1.1.2"
-  checksum: 10c0/be184dbd5eadffd899811bcd91b22df96d968b29e31076e8bbafcaa5c25dafd0012b8daece4135b876e4576407e4ca811c089ead2bb45f9e08df812ba0966a82
+  checksum: 10c0/45e8c841ad188a41402ddcd1294901e861ee0819f632fb494f2ed344ef9c43315d294d443fb48d594e6586a3b779785120f43321417adaef8567316a55072949
   languageName: node
   linkType: hard