diff --git a/examples/aws-companion/package.json b/examples/aws-companion/package.json
index 1c9ae48615..8af34fe01a 100644
--- a/examples/aws-companion/package.json
+++ b/examples/aws-companion/package.json
@@ -11,7 +11,7 @@
   },
   "devDependencies": {
     "@uppy/companion": "workspace:*",
-    "body-parser": "^1.20.0",
+    "body-parser": "^1.20.3",
     "cookie-parser": "^1.4.6",
     "cors": "^2.8.5",
     "dotenv": "^16.0.1",
diff --git a/examples/aws-nodejs/package.json b/examples/aws-nodejs/package.json
index ed07df7f8c..7cf824ef9a 100644
--- a/examples/aws-nodejs/package.json
+++ b/examples/aws-nodejs/package.json
@@ -13,7 +13,7 @@
     "@aws-sdk/client-s3": "^3.338.0",
     "@aws-sdk/client-sts": "^3.338.0",
     "@aws-sdk/s3-request-presigner": "^3.338.0",
-    "body-parser": "^1.20.0",
+    "body-parser": "^1.20.3",
     "dotenv": "^16.0.0",
     "express": "^4.19.2"
   }
diff --git a/examples/custom-provider/package.json b/examples/custom-provider/package.json
index a1aaf21758..1429899e6e 100644
--- a/examples/custom-provider/package.json
+++ b/examples/custom-provider/package.json
@@ -16,7 +16,7 @@
   },
   "devDependencies": {
     "@uppy/companion": "workspace:*",
-    "body-parser": "^1.18.2",
+    "body-parser": "^1.20.3",
     "dotenv": "^16.0.1",
     "express": "^4.19.2",
     "express-session": "^1.15.6",
diff --git a/examples/digitalocean-spaces/package.json b/examples/digitalocean-spaces/package.json
index f599a61b8e..3fd2bdb85d 100644
--- a/examples/digitalocean-spaces/package.json
+++ b/examples/digitalocean-spaces/package.json
@@ -6,7 +6,7 @@
     "@uppy/aws-s3": "workspace:*",
     "@uppy/core": "workspace:*",
     "@uppy/dashboard": "workspace:*",
-    "body-parser": "^1.18.3",
+    "body-parser": "^1.20.3",
     "cors": "^2.8.5"
   },
   "devDependencies": {
diff --git a/examples/uppy-with-companion/package.json b/examples/uppy-with-companion/package.json
index 310e183cb1..5f0bb6969e 100644
--- a/examples/uppy-with-companion/package.json
+++ b/examples/uppy-with-companion/package.json
@@ -3,7 +3,7 @@
   "version": "0.0.0",
   "dependencies": {
     "@uppy/companion": "workspace:*",
-    "body-parser": "^1.18.2",
+    "body-parser": "^1.20.3",
     "express": "^4.19.2",
     "express-session": "^1.15.6",
     "light-server": "^2.4.0",
diff --git a/packages/@uppy/companion/package.json b/packages/@uppy/companion/package.json
index cf4e68c516..faf0f15c31 100644
--- a/packages/@uppy/companion/package.json
+++ b/packages/@uppy/companion/package.json
@@ -33,7 +33,7 @@
     "@aws-sdk/lib-storage": "^3.338.0",
     "@aws-sdk/s3-presigned-post": "^3.338.0",
     "@aws-sdk/s3-request-presigner": "^3.338.0",
-    "body-parser": "1.20.2",
+    "body-parser": "1.20.3",
     "common-tags": "1.8.2",
     "connect-redis": "7.1.1",
     "content-disposition": "^0.5.4",
diff --git a/yarn.lock b/yarn.lock
index e581f38ba2..4d4ebd8827 100644
--- a/yarn.lock
+++ b/yarn.lock
@@ -8318,7 +8318,7 @@ __metadata:
     "@uppy/dashboard": "workspace:*"
     "@uppy/google-drive": "workspace:*"
     "@uppy/webcam": "workspace:*"
-    body-parser: "npm:^1.20.0"
+    body-parser: "npm:^1.20.3"
     cookie-parser: "npm:^1.4.6"
     cors: "npm:^2.8.5"
     dotenv: "npm:^16.0.1"
@@ -8336,7 +8336,7 @@ __metadata:
     "@aws-sdk/client-s3": "npm:^3.338.0"
     "@aws-sdk/client-sts": "npm:^3.338.0"
     "@aws-sdk/s3-request-presigner": "npm:^3.338.0"
-    body-parser: "npm:^1.20.0"
+    body-parser: "npm:^1.20.3"
     dotenv: "npm:^16.0.0"
     express: "npm:^4.19.2"
   languageName: unknown
@@ -8386,7 +8386,7 @@ __metadata:
     "@uppy/google-drive": "workspace:*"
     "@uppy/provider-views": "workspace:*"
     "@uppy/tus": "workspace:*"
-    body-parser: "npm:^1.18.2"
+    body-parser: "npm:^1.20.3"
     dotenv: "npm:^16.0.1"
     express: "npm:^4.19.2"
     express-session: "npm:^1.15.6"
@@ -8403,7 +8403,7 @@ __metadata:
     "@uppy/aws-s3": "workspace:*"
     "@uppy/core": "workspace:*"
     "@uppy/dashboard": "workspace:*"
-    body-parser: "npm:^1.18.3"
+    body-parser: "npm:^1.20.3"
     cors: "npm:^2.8.5"
     dotenv: "npm:^16.0.1"
     express: "npm:^4.19.2"
@@ -8585,7 +8585,7 @@ __metadata:
   resolution: "@uppy-example/uppy-with-companion@workspace:examples/uppy-with-companion"
   dependencies:
     "@uppy/companion": "workspace:*"
-    body-parser: "npm:^1.18.2"
+    body-parser: "npm:^1.20.3"
     express: "npm:^4.19.2"
     express-session: "npm:^1.15.6"
     light-server: "npm:^2.4.0"
@@ -8727,7 +8727,7 @@ __metadata:
     "@types/request": "npm:2.48.8"
     "@types/webpack": "npm:^5.28.0"
     "@types/ws": "npm:8.5.3"
-    body-parser: "npm:1.20.2"
+    body-parser: "npm:1.20.3"
     common-tags: "npm:1.8.2"
     connect-redis: "npm:7.1.1"
     content-disposition: "npm:^0.5.4"
@@ -10960,7 +10960,7 @@ __metadata:
   languageName: node
   linkType: hard
 
-"body-parser@npm:1.20.2, body-parser@npm:^1.18.2, body-parser@npm:^1.18.3, body-parser@npm:^1.19.0, body-parser@npm:^1.20.0":
+"body-parser@npm:1.20.2, body-parser@npm:^1.19.0":
   version: 1.20.2
   resolution: "body-parser@npm:1.20.2"
   dependencies:
@@ -10980,6 +10980,26 @@ __metadata:
   languageName: node
   linkType: hard
 
+"body-parser@npm:1.20.3, body-parser@npm:^1.20.3":
+  version: 1.20.3
+  resolution: "body-parser@npm:1.20.3"
+  dependencies:
+    bytes: "npm:3.1.2"
+    content-type: "npm:~1.0.5"
+    debug: "npm:2.6.9"
+    depd: "npm:2.0.0"
+    destroy: "npm:1.2.0"
+    http-errors: "npm:2.0.0"
+    iconv-lite: "npm:0.4.24"
+    on-finished: "npm:2.4.1"
+    qs: "npm:6.13.0"
+    raw-body: "npm:2.5.2"
+    type-is: "npm:~1.6.18"
+    unpipe: "npm:1.0.0"
+  checksum: 10/8723e3d7a672eb50854327453bed85ac48d045f4958e81e7d470c56bf111f835b97e5b73ae9f6393d0011cc9e252771f46fd281bbabc57d33d3986edf1e6aeca
+  languageName: node
+  linkType: hard
+
 "bonjour-service@npm:^1.2.1":
   version: 1.2.1
   resolution: "bonjour-service@npm:1.2.1"
@@ -24902,6 +24922,15 @@ __metadata:
   languageName: node
   linkType: hard
 
+"qs@npm:6.13.0":
+  version: 6.13.0
+  resolution: "qs@npm:6.13.0"
+  dependencies:
+    side-channel: "npm:^1.0.6"
+  checksum: 10/f548b376e685553d12e461409f0d6e5c59ec7c7d76f308e2a888fd9db3e0c5e89902bedd0754db3a9038eda5f27da2331a6f019c8517dc5e0a16b3c9a6e9cef8
+  languageName: node
+  linkType: hard
+
 "qs@npm:^6.11.0, qs@npm:^6.11.2, qs@npm:^6.9.6":
   version: 6.12.1
   resolution: "qs@npm:6.12.1"