diff --git a/reference-apps/nodejs/package-lock.json b/reference-apps/nodejs/package-lock.json
index fbe6a06..40181e8 100644
--- a/reference-apps/nodejs/package-lock.json
+++ b/reference-apps/nodejs/package-lock.json
@@ -12,7 +12,7 @@
         "amqplib": "^0.10.3",
         "cors": "^2.8.6",
         "express": "^5.2.0",
-        "express-rate-limit": "^8.2.2",
+        "express-rate-limit": "^8.5.1",
         "helmet": "^8.1.0",
         "mongodb": "^7.1.0",
         "mysql2": "^3.16.3",
@@ -3306,12 +3306,12 @@
       }
     },
     "node_modules/express-rate-limit": {
-      "version": "8.2.2",
-      "resolved": "https://registry.npmjs.org/express-rate-limit/-/express-rate-limit-8.2.2.tgz",
-      "integrity": "sha512-Ybv7bqtOgA914MLwaHWVFXMpMYeR1MQu/D+z2MaLYteqBsTIp9sY3AU7mGNLMJv8eLg8uQMpE20I+L2Lv49nSg==",
+      "version": "8.5.1",
+      "resolved": "https://registry.npmjs.org/express-rate-limit/-/express-rate-limit-8.5.1.tgz",
+      "integrity": "sha512-5O6KYmyJEpuPJV5hNTXKbAHWRqrzyu+OI3vUnSd2kXFubIVpG7ezpgxQy76Zo5GQZtrQBg86hF+CM/NX+cioiQ==",
       "license": "MIT",
       "dependencies": {
-        "ip-address": "10.1.0"
+        "ip-address": "^10.2.0"
       },
       "engines": {
         "node": ">= 16"
@@ -3944,9 +3944,9 @@
       "license": "ISC"
     },
     "node_modules/ip-address": {
-      "version": "10.1.0",
-      "resolved": "https://registry.npmjs.org/ip-address/-/ip-address-10.1.0.tgz",
-      "integrity": "sha512-XXADHxXmvT9+CRxhXg56LJovE+bmWnEWB78LB83VZTprKTmaC5QfruXocxzTZ2Kl0DNwKuBdlIhjL8LeY8Sf8Q==",
+      "version": "10.2.0",
+      "resolved": "https://registry.npmjs.org/ip-address/-/ip-address-10.2.0.tgz",
+      "integrity": "sha512-/+S6j4E9AHvW9SWMSEY9Xfy66O5PWvVEJ08O0y5JGyEKQpojb0K0GKpz/v5HJ/G0vi3D2sjGK78119oXZeE0qA==",
       "license": "MIT",
       "engines": {
         "node": ">= 12"
diff --git a/reference-apps/nodejs/package.json b/reference-apps/nodejs/package.json
index 1334f0f..fcf0b1c 100644
--- a/reference-apps/nodejs/package.json
+++ b/reference-apps/nodejs/package.json
@@ -27,7 +27,7 @@
     "amqplib": "^0.10.3",
     "cors": "^2.8.6",
     "express": "^5.2.0",
-    "express-rate-limit": "^8.2.2",
+    "express-rate-limit": "^8.5.1",
     "helmet": "^8.1.0",
     "mongodb": "^7.1.0",
     "mysql2": "^3.16.3",