diff --git a/package-lock.json b/package-lock.json
index c5e603529..81c0b3c9e 100644
--- a/package-lock.json
+++ b/package-lock.json
@@ -16,7 +16,7 @@
         "cassandra-driver": "^4.8.0",
         "compression": "^1.8.1",
         "cookie-session": "^2.1.1",
-        "cors": "^2.8.5",
+        "cors": "^2.8.6",
         "dotaconstants": "^10.7.0",
         "express": "^5.2.1",
         "http-proxy": "^1.18.1",
@@ -1281,7 +1281,9 @@
       }
     },
     "node_modules/cors": {
-      "version": "2.8.5",
+      "version": "2.8.6",
+      "resolved": "https://registry.npmjs.org/cors/-/cors-2.8.6.tgz",
+      "integrity": "sha512-tJtZBBHA6vjIAaF6EnIaq6laBBP9aq/Y3ouVJjEfoHbRBcHBAHYcMh/w8LDrk2PvIMMq8gmopa5D4V8RmbrxGw==",
       "license": "MIT",
       "dependencies": {
         "object-assign": "^4",
@@ -1289,6 +1291,10 @@
       },
       "engines": {
         "node": ">= 0.10"
+      },
+      "funding": {
+        "type": "opencollective",
+        "url": "https://opencollective.com/express"
       }
     },
     "node_modules/croner": {
diff --git a/package.json b/package.json
index 977ddc187..f70bcb62b 100644
--- a/package.json
+++ b/package.json
@@ -32,7 +32,7 @@
     "cassandra-driver": "^4.8.0",
     "compression": "^1.8.1",
     "cookie-session": "^2.1.1",
-    "cors": "^2.8.5",
+    "cors": "^2.8.6",
     "dotaconstants": "^10.7.0",
     "express": "^5.2.1",
     "http-proxy": "^1.18.1",