diff --git a/package-lock.json b/package-lock.json
index f35eeced6..8e4b5085c 100644
--- a/package-lock.json
+++ b/package-lock.json
@@ -19,20 +19,20 @@
         "chainpad-crypto": "^0.2.5",
         "chainpad-listmap": "^1.1.0",
         "chainpad-netflux": "^1.2.0",
-        "chainpad-server": "^5.2.2",
+        "chainpad-server": "^5.2.3",
         "ckeditor": "npm:ckeditor4@~4.22.1",
         "codemirror": "^5.19.0",
         "components-font-awesome": "^4.6.3",
-        "cookie-parser": "^1.4.6",
+        "cookie-parser": "^1.4.7",
         "croppie": "^2.5.0",
         "dragula": "3.7.2",
         "drawio": "github:cryptpad/drawio-npm#npm-21.8.2+5",
-        "express": "~4.21.0",
+        "express": "~4.21.1",
         "file-saver": "1.3.1",
         "fs-extra": "^7.0.0",
         "get-folder-size": "^2.0.1",
         "html2canvas": "^1.4.0",
-        "http-proxy-middleware": "^3.0.2",
+        "http-proxy-middleware": "^3.0.3",
         "hyper-json": "~1.4.0",
         "jquery": "3.6.0",
         "json.sortify": "~2.1.0",
@@ -2124,15 +2124,9 @@
       }
     },
     "node_modules/chainpad-server": {
-      "version": "5.2.2",
-      "resolved": "https://registry.npmjs.org/chainpad-server/-/chainpad-server-5.2.2.tgz",
-      "integrity": "sha512-fUCffhnd8PlO92A6cYH5lSIiiI6bpJymP0yC3O2KI+4NPyxFK7I2iuadMrC7RzK3eAI1w72Y1nbMN8rQImppoQ==",
-      "dependencies": {
-        "nthen": "0.1.8",
-        "pull-stream": "^3.6.9",
-        "stream-to-pull-stream": "^1.7.3",
-        "ws": "^3.3.1"
-      }
+      "version": "5.2.3",
+      "resolved": "https://registry.npmjs.org/chainpad-server/-/chainpad-server-5.2.3.tgz",
+      "integrity": "sha512-QH4PFXR051jK/t2dF1nw6f3HZQ/c/kO3Pcz2hWY7qAximQ7KF7vGseEJE2Q7xb40Y00F1+25gLBha4v6cUNdZw=="
     },
     "node_modules/chainpad/node_modules/json.sortify": {
       "version": "2.2.2",
@@ -2347,19 +2341,19 @@
       }
     },
     "node_modules/cookie": {
-      "version": "0.6.0",
-      "resolved": "https://registry.npmjs.org/cookie/-/cookie-0.6.0.tgz",
-      "integrity": "sha512-U71cyTamuh1CRNCfpGY6to28lxvNwPG4Guz/EVjgf3Jmzv0vlDp1atT9eS5dDjMYHucpHbWns6Lwf3BKz6svdw==",
+      "version": "0.7.1",
+      "resolved": "https://registry.npmjs.org/cookie/-/cookie-0.7.1.tgz",
+      "integrity": "sha512-6DnInpx7SJ2AK3+CTUE/ZM0vWTUboZCegxhC2xiIydHR9jNuTAASBrfEpHhiGOZw/nX51bHt6YQl8jsGo4y/0w==",
       "engines": {
         "node": ">= 0.6"
       }
     },
     "node_modules/cookie-parser": {
-      "version": "1.4.6",
-      "resolved": "https://registry.npmjs.org/cookie-parser/-/cookie-parser-1.4.6.tgz",
-      "integrity": "sha512-z3IzaNjdwUC2olLIB5/ITd0/setiaFMLYiZJle7xg5Fe9KWAceil7xszYfHHBtDFYLSgJduS2Ty0P1uJdPDJeA==",
+      "version": "1.4.7",
+      "resolved": "https://registry.npmjs.org/cookie-parser/-/cookie-parser-1.4.7.tgz",
+      "integrity": "sha512-nGUvgXnotP3BsjiLX2ypbQnWoGUPIIfHQNZkkC668ntrzGWEZVW70HDEB1qnNGMicPje6EttlIgzo51YSwNQGw==",
       "dependencies": {
-        "cookie": "0.4.1",
+        "cookie": "0.7.2",
         "cookie-signature": "1.0.6"
       },
       "engines": {
@@ -2367,9 +2361,9 @@
       }
     },
     "node_modules/cookie-parser/node_modules/cookie": {
-      "version": "0.4.1",
-      "resolved": "https://registry.npmjs.org/cookie/-/cookie-0.4.1.tgz",
-      "integrity": "sha512-ZwrFkGJxUR3EIoXtO+yVE69Eb7KlixbaeAWfBQB9vVsNn/o+Yw69gBWSSDK825hQNdN+wF8zELf3dFNl/kxkUA==",
+      "version": "0.7.2",
+      "resolved": "https://registry.npmjs.org/cookie/-/cookie-0.7.2.tgz",
+      "integrity": "sha512-yki5XnKuf750l50uGTllt6kKILY4nQ1eNIQatoXEByZ5dWgnKqbnqmTrBE5B4N7lrMJKQ2ytWMiTO2o0v6Ew/w==",
       "engines": {
         "node": ">= 0.6"
       }
@@ -3123,16 +3117,16 @@
       }
     },
     "node_modules/express": {
-      "version": "4.21.0",
-      "resolved": "https://registry.npmjs.org/express/-/express-4.21.0.tgz",
-      "integrity": "sha512-VqcNGcj/Id5ZT1LZ/cfihi3ttTn+NJmkli2eZADigjq29qTlWi/hAQ43t/VLPq8+UX06FCEx3ByOYet6ZFblng==",
+      "version": "4.21.1",
+      "resolved": "https://registry.npmjs.org/express/-/express-4.21.1.tgz",
+      "integrity": "sha512-YSFlK1Ee0/GC8QaO91tHcDxJiE/X4FbpAyQWkxAvG6AXCuR65YzK8ua6D9hvi/TzUfZMpc+BwuM1IPw8fmQBiQ==",
       "dependencies": {
         "accepts": "~1.3.8",
         "array-flatten": "1.1.1",
         "body-parser": "1.20.3",
         "content-disposition": "0.5.4",
         "content-type": "~1.0.4",
-        "cookie": "0.6.0",
+        "cookie": "0.7.1",
         "cookie-signature": "1.0.6",
         "debug": "2.6.9",
         "depd": "2.0.0",
@@ -3784,9 +3778,9 @@
       }
     },
     "node_modules/http-proxy-middleware": {
-      "version": "3.0.2",
-      "resolved": "https://registry.npmjs.org/http-proxy-middleware/-/http-proxy-middleware-3.0.2.tgz",
-      "integrity": "sha512-fBLFpmvDzlxdckwZRjM0wWtwDZ4KBtQ8NFqhrFKoEtK4myzuiumBuNTxD+F4cVbXfOZljIbrynmvByofDzT7Ag==",
+      "version": "3.0.3",
+      "resolved": "https://registry.npmjs.org/http-proxy-middleware/-/http-proxy-middleware-3.0.3.tgz",
+      "integrity": "sha512-usY0HG5nyDUwtqpiZdETNbmKtw3QQ1jwYFZ9wi5iHzX2BcILwQKtYDJPo7XHTsu5Z0B2Hj3W9NNnbd+AjFWjqg==",
       "dependencies": {
         "@types/http-proxy": "^1.17.15",
         "debug": "^4.3.6",
diff --git a/package.json b/package.json
index aebcfd34b..5d70a7965 100644
--- a/package.json
+++ b/package.json
@@ -22,20 +22,20 @@
     "chainpad-crypto": "^0.2.5",
     "chainpad-listmap": "^1.1.0",
     "chainpad-netflux": "^1.2.0",
-    "chainpad-server": "^5.2.2",
+    "chainpad-server": "^5.2.3",
     "ckeditor": "npm:ckeditor4@~4.22.1",
     "codemirror": "^5.19.0",
     "components-font-awesome": "^4.6.3",
-    "cookie-parser": "^1.4.6",
+    "cookie-parser": "^1.4.7",
     "croppie": "^2.5.0",
     "dragula": "3.7.2",
     "drawio": "github:cryptpad/drawio-npm#npm-21.8.2+5",
-    "express": "~4.21.0",
+    "express": "~4.21.1",
     "file-saver": "1.3.1",
     "fs-extra": "^7.0.0",
     "get-folder-size": "^2.0.1",
     "html2canvas": "^1.4.0",
-    "http-proxy-middleware": "^3.0.2",
+    "http-proxy-middleware": "^3.0.3",
     "hyper-json": "~1.4.0",
     "jquery": "3.6.0",
     "json.sortify": "~2.1.0",