diff --git a/server/package-lock.json b/server/package-lock.json
index faa6cca67..0de856056 100644
--- a/server/package-lock.json
+++ b/server/package-lock.json
@@ -15,7 +15,7 @@
                 "express": "^4.17.1",
                 "express-http-proxy": "^2.0.0",
                 "express-session": "^1.17.2",
-                "helmet": "^7.0.0",
+                "helmet": "^8.0.0",
                 "https-proxy-agent": "^7.0.0",
                 "jsonwebtoken": "^9.0.0",
                 "openid-client": "^5.0.2",
@@ -1552,11 +1552,11 @@
             }
         },
         "node_modules/helmet": {
-            "version": "7.1.0",
-            "resolved": "https://registry.npmjs.org/helmet/-/helmet-7.1.0.tgz",
-            "integrity": "sha512-g+HZqgfbpXdCkme/Cd/mZkV0aV3BZZZSugecH03kl38m/Kmdx8jKjBikpDj2cr+Iynv4KpYEviojNdTJActJAg==",
+            "version": "8.0.0",
+            "resolved": "https://registry.npmjs.org/helmet/-/helmet-8.0.0.tgz",
+            "integrity": "sha512-VyusHLEIIO5mjQPUI1wpOAEu+wl6Q0998jzTxqUYGE45xCIcAxy3MsbEK/yyJUJ3ADeMoB6MornPH6GMWAf+Pw==",
             "engines": {
-                "node": ">=16.0.0"
+                "node": ">=18.0.0"
             }
         },
         "node_modules/help-me": {
@@ -3587,9 +3587,9 @@
             }
         },
         "helmet": {
-            "version": "7.1.0",
-            "resolved": "https://registry.npmjs.org/helmet/-/helmet-7.1.0.tgz",
-            "integrity": "sha512-g+HZqgfbpXdCkme/Cd/mZkV0aV3BZZZSugecH03kl38m/Kmdx8jKjBikpDj2cr+Iynv4KpYEviojNdTJActJAg=="
+            "version": "8.0.0",
+            "resolved": "https://registry.npmjs.org/helmet/-/helmet-8.0.0.tgz",
+            "integrity": "sha512-VyusHLEIIO5mjQPUI1wpOAEu+wl6Q0998jzTxqUYGE45xCIcAxy3MsbEK/yyJUJ3ADeMoB6MornPH6GMWAf+Pw=="
         },
         "help-me": {
             "version": "5.0.0",
diff --git a/server/package.json b/server/package.json
index db5edc4bb..1d6e660ef 100644
--- a/server/package.json
+++ b/server/package.json
@@ -23,7 +23,7 @@
         "express": "^4.17.1",
         "express-http-proxy": "^2.0.0",
         "express-session": "^1.17.2",
-        "helmet": "^7.0.0",
+        "helmet": "^8.0.0",
         "https-proxy-agent": "^7.0.0",
         "jsonwebtoken": "^9.0.0",
         "openid-client": "^5.0.2",