diff --git a/backend/package-lock.json b/backend/package-lock.json
index 6e30d18..db405fa 100644
--- a/backend/package-lock.json
+++ b/backend/package-lock.json
@@ -13,7 +13,7 @@
                 "dotenv": "^16.4.5",
                 "express": "^4.19.2",
                 "express-rate-limit": "^7.4.0",
-                "helmet": "^7.1.0",
+                "helmet": "^8.2.0",
                 "jsonwebtoken": "^9.0.2",
                 "morgan": "^1.10.0",
                 "multer": "^2.1.0",
@@ -444,7 +444,6 @@
             "resolved": "https://registry.npmjs.org/express/-/express-4.22.1.tgz",
             "integrity": "sha512-F2X8g9P1X7uCPZMA3MVf9wcTqlyNp7IhH5qPCI0izhaOIYXaW9L535tGA3qmjRzpH+bZczqq7hVKxTR4NWnu+g==",
             "license": "MIT",
-            "peer": true,
             "dependencies": {
                 "accepts": "~1.3.8",
                 "array-flatten": "1.1.1",
@@ -671,12 +670,15 @@
             }
         },
         "node_modules/helmet": {
-            "version": "7.2.0",
-            "resolved": "https://registry.npmjs.org/helmet/-/helmet-7.2.0.tgz",
-            "integrity": "sha512-ZRiwvN089JfMXokizgqEPXsl2Guk094yExfoDXR0cBYWxtBbaSww/w+vT4WEJsBW2iTUi1GgZ6swmoug3Oy4Xw==",
+            "version": "8.2.0",
+            "resolved": "https://registry.npmjs.org/helmet/-/helmet-8.2.0.tgz",
+            "integrity": "sha512-DRgTIUgnWcJ62KyarxxziuqYxKGnR6Rgg19BlbucN/dpmJbl1XOit6qvoOX0ZT+HhWe5OUVhU/a1zpGyc1xA0Q==",
             "license": "MIT",
             "engines": {
-                "node": ">=16.0.0"
+                "node": ">=18.0.0"
+            },
+            "funding": {
+                "url": "https://github.com/sponsors/EvanHahn"
             }
         },
         "node_modules/http-errors": {
diff --git a/backend/package.json b/backend/package.json
index dd68e5e..b9d8c73 100644
--- a/backend/package.json
+++ b/backend/package.json
@@ -16,7 +16,7 @@
         "dotenv": "^16.4.5",
         "express": "^4.19.2",
         "express-rate-limit": "^7.4.0",
-        "helmet": "^7.1.0",
+        "helmet": "^8.2.0",
         "jsonwebtoken": "^9.0.2",
         "morgan": "^1.10.0",
         "multer": "^2.1.0",