diff --git a/packages/nomnom-api/package.json b/packages/nomnom-api/package.json
index 2c3bd6a..a5d4a46 100644
--- a/packages/nomnom-api/package.json
+++ b/packages/nomnom-api/package.json
@@ -34,7 +34,7 @@
     "db-migrate": "0.11.1",
     "db-migrate-pg": "0.4.0",
     "dotenv": "6.0.0",
-    "express": "4.16.3",
+    "express": "4.17.3",
     "feedparser": "2.2.9",
     "get-stream": "3.0.0",
     "googleapis": "32.0.0",
diff --git a/packages/nomnom-api/yarn.lock b/packages/nomnom-api/yarn.lock
index d97e272..1047135 100644
--- a/packages/nomnom-api/yarn.lock
+++ b/packages/nomnom-api/yarn.lock
@@ -1370,7 +1370,7 @@ etag@~1.8.1:
 
 event-stream@~3.3.0:
   version "3.3.4"
-  resolved "http://registry.npmjs.org/event-stream/-/event-stream-3.3.4.tgz#4ab4c9a0f5a54db9338b4c34d86bfce8f4b35571"
+  resolved "https://registry.npmjs.org/event-stream/-/event-stream-3.3.4.tgz#4ab4c9a0f5a54db9338b4c34d86bfce8f4b35571"
   dependencies:
     duplexer "~0.1.1"
     from "~0"