diff --git a/package.json b/package.json
index 06376e71..638ca05c 100644
--- a/package.json
+++ b/package.json
@@ -32,7 +32,7 @@
     "compression": "1.7.5",
     "connect-flash": "0.1.1",
     "connect-session-sequelize": "7.1.7",
-    "cookie": "0.6.0",
+    "cookie": "0.7.2",
     "cookie-parser": "1.4.7",
     "deep-freeze": "0.0.1",
     "diff-match-patch": "git+https://github.com/hackmdio/diff-match-patch.git#commit=59a9395ad9fe143e601e7ae5765ed943bdd2b11e",
diff --git a/yarn.lock b/yarn.lock
index ba3df3de..1a7b0c46 100644
--- a/yarn.lock
+++ b/yarn.lock
@@ -1267,7 +1267,7 @@ __metadata:
     compression: "npm:1.7.5"
     connect-flash: "npm:0.1.1"
     connect-session-sequelize: "npm:7.1.7"
-    cookie: "npm:0.6.0"
+    cookie: "npm:0.7.2"
     cookie-parser: "npm:1.4.7"
     copy-webpack-plugin: "npm:6.4.1"
     css-loader: "npm:5.2.7"
@@ -4016,13 +4016,6 @@ __metadata:
   languageName: node
   linkType: hard
 
-"cookie@npm:0.6.0":
-  version: 0.6.0
-  resolution: "cookie@npm:0.6.0"
-  checksum: 10/c1f8f2ea7d443b9331680598b0ae4e6af18a618c37606d1bbdc75bec8361cce09fe93e727059a673f2ba24467131a9fb5a4eec76bb1b149c1b3e1ccb268dc583
-  languageName: node
-  linkType: hard
-
 "cookie@npm:0.7.1":
   version: 0.7.1
   resolution: "cookie@npm:0.7.1"