diff --git a/chapter26/TodoRelayWeb/package.json b/chapter26/TodoRelayWeb/package.json
index 6733fe91..e504fb79 100644
--- a/chapter26/TodoRelayWeb/package.json
+++ b/chapter26/TodoRelayWeb/package.json
@@ -18,7 +18,7 @@
     "babel-relay-plugin": "^0.10.0",
     "babel-runtime": "^6.22.0",
     "classnames": "2.2.5",
-    "express": "4.14.0",
+    "express": "4.19.2",
     "express-graphql": "^0.6.2",
     "graphql": "^0.9.0",
     "graphql-relay": "^0.5.0",