diff --git a/api-server/package-lock.json b/api-server/package-lock.json
index ea6572615efef8..992ca0f7f2ec2c 100644
--- a/api-server/package-lock.json
+++ b/api-server/package-lock.json
@@ -7473,18 +7473,23 @@
       }
     },
     "express-validator": {
-      "version": "6.9.2",
-      "resolved": "https://registry.npmjs.org/express-validator/-/express-validator-6.9.2.tgz",
-      "integrity": "sha512-Yqlsw2/uBobtBVkP+gnds8OMmVAEb3uTI4uXC93l0Ym5JGHgr8Vd4ws7oSo7GGYpWn5YCq4UePMEppKchURXrw==",
+      "version": "6.14.1",
+      "resolved": "https://registry.npmjs.org/express-validator/-/express-validator-6.14.1.tgz",
+      "integrity": "sha512-4w7gn/jPW1a+r833xBqpu4pL7XiiScDwlbBIMtiqUEt/MVNqR94HOHyKLcCtnqCnEPiqrX1Mqt9l/SVN/iqeLA==",
       "requires": {
-        "lodash": "^4.17.20",
-        "validator": "^13.5.2"
+        "lodash": "^4.17.21",
+        "validator": "^13.7.0"
       },
       "dependencies": {
+        "lodash": {
+          "version": "4.17.21",
+          "resolved": "https://registry.npmjs.org/lodash/-/lodash-4.17.21.tgz",
+          "integrity": "sha512-v2kDEe57lecTulaDIuNTPy3Ry4gLGJ6Z1O3vE1krgXZNrsQ+LFTGHVxVjcXPs17LhbZVGedAJv8XZ1tvj5FvSg=="
+        },
         "validator": {
-          "version": "13.5.2",
-          "resolved": "https://registry.npmjs.org/validator/-/validator-13.5.2.tgz",
-          "integrity": "sha512-mD45p0rvHVBlY2Zuy3F3ESIe1h5X58GPfAtslBjY7EtTqGquZTj+VX/J4RnHWN8FKq0C9WRVt1oWAcytWRuYLQ=="
+          "version": "13.7.0",
+          "resolved": "https://registry.npmjs.org/validator/-/validator-13.7.0.tgz",
+          "integrity": "sha512-nYXQLCBkpJ8X6ltALua9dRrZDHVYxjJ1wgskNt1lH9fzGjs3tgojGSCBjmEPwkWS1y29+DrizMTW19Pr9uB2nw=="
         }
       }
     },
diff --git a/api-server/package.json b/api-server/package.json
index 4c9d5721baaba9..f6bf9a5052d6f5 100644
--- a/api-server/package.json
+++ b/api-server/package.json
@@ -31,7 +31,7 @@
     "dotenv": "^6.2.0",
     "express-flash": "~0.0.2",
     "express-session": "^1.17.1",
-    "express-validator": "^6.9.2",
+    "express-validator": "^6.14.1",
     "googleapis": "^42.0.0",
     "helmet": "^3.23.3",
     "helmet-csp": "^2.10.0",