diff --git a/2018/quals/misc-bookshelf/app/package.json b/2018/quals/misc-bookshelf/app/package.json
index 17c6e5352..243fc9004 100644
--- a/2018/quals/misc-bookshelf/app/package.json
+++ b/2018/quals/misc-bookshelf/app/package.json
@@ -57,7 +57,7 @@
     "@google-cloud/datastore": "1.3.4",
     "@google-cloud/storage": "1.6.0",
     "body-parser": "1.18.2",
-    "express": "4.16.2",
+    "express": "4.20.0",
     "lodash": "4.17.5",
     "mongodb": "3.0.2",
     "multer": "1.3.0",