diff --git a/package-lock.json b/package-lock.json
index ed8087716..2df83ec8a 100644
--- a/package-lock.json
+++ b/package-lock.json
@@ -3510,7 +3510,9 @@
       }
     },
     "node_modules/cookies": {
-      "version": "0.8.0",
+      "version": "0.9.1",
+      "resolved": "https://registry.npmjs.org/cookies/-/cookies-0.9.1.tgz",
+      "integrity": "sha512-TG2hpqe4ELx54QER/S3HQ9SRVnQnGBtKUz5bLQWtYAQ+o6GpgMs6sYUvaiJjVxb+UXwhRhAEP3m7LbsIZ77Hmw==",
       "license": "MIT",
       "dependencies": {
         "depd": "~2.0.0",
@@ -5712,6 +5714,8 @@
     },
     "node_modules/keygrip": {
       "version": "1.1.0",
+      "resolved": "https://registry.npmjs.org/keygrip/-/keygrip-1.1.0.tgz",
+      "integrity": "sha512-iYSchDJ+liQ8iwbSI2QqsQOvqv58eJCEanyJPJi+Khyu8smkcKSFUCbPwzFcL7YVtZ6eONjqRX/38caJ7QjRAQ==",
       "license": "MIT",
       "dependencies": {
         "tsscmp": "1.0.6"
@@ -5736,14 +5740,16 @@
       }
     },
     "node_modules/koa": {
-      "version": "2.13.4",
+      "version": "2.15.4",
+      "resolved": "https://registry.npmjs.org/koa/-/koa-2.15.4.tgz",
+      "integrity": "sha512-7fNBIdrU2PEgLljXoPWoyY4r1e+ToWCmzS/wwMPbUNs7X+5MMET1ObhJBlUkF5uZG9B6QhM2zS1TsH6adegkiQ==",
       "license": "MIT",
       "dependencies": {
         "accepts": "^1.3.5",
         "cache-content-type": "^1.0.0",
         "content-disposition": "~0.5.2",
         "content-type": "^1.0.4",
-        "cookies": "~0.8.0",
+        "cookies": "~0.9.0",
         "debug": "^4.3.2",
         "delegates": "^1.0.0",
         "depd": "^2.0.0",
@@ -8098,6 +8104,8 @@
     },
     "node_modules/tsscmp": {
       "version": "1.0.6",
+      "resolved": "https://registry.npmjs.org/tsscmp/-/tsscmp-1.0.6.tgz",
+      "integrity": "sha512-LxhtAkPDTkVCMQjt2h6eBVY28KCjikZqZfMcC15YBeNjkgUpdCfBu5HoiOTDu86v6smE8yOjyEktJ8hlbANHQA==",
       "license": "MIT",
       "engines": {
         "node": ">=0.6.x"
@@ -8885,7 +8893,7 @@
       "version": "0.0.0",
       "license": "BSD-3-Clause",
       "dependencies": {
-        "koa": "^2.13.0",
+        "koa": "^2.15.4",
         "koa-conditional-get": "^3.0.0",
         "koa-etag": "^4.0.0",
         "koa-send": "^5.0.0",
diff --git a/packages/lit-dev-server/package.json b/packages/lit-dev-server/package.json
index 850623d82..758878ac3 100644
--- a/packages/lit-dev-server/package.json
+++ b/packages/lit-dev-server/package.json
@@ -61,7 +61,7 @@
     }
   },
   "dependencies": {
-    "koa": "^2.13.0",
+    "koa": "^2.15.4",
     "koa-conditional-get": "^3.0.0",
     "koa-etag": "^4.0.0",
     "koa-send": "^5.0.0",