diff --git a/package-lock.json b/package-lock.json
index 25fe8bc..769c2c0 100644
--- a/package-lock.json
+++ b/package-lock.json
@@ -9,7 +9,7 @@
       "version": "0.2.1",
       "license": "Apache-2.0",
       "dependencies": {
-        "@modelcontextprotocol/express": "^2.0.0",
+        "@modelcontextprotocol/express": "^2.0.2",
         "@modelcontextprotocol/node": "^2.1.1",
         "@modelcontextprotocol/server": "^2.3.1",
         "busboy": "^1.6.0",
@@ -680,10 +680,10 @@
       }
     },
     "node_modules/@modelcontextprotocol/express": {
-      "version": "2.0.0",
-      "resolved": "https://registry.npmjs.org/@modelcontextprotocol/express/-/express-2.0.0.tgz",
-      "integrity": "sha512-Snlr8j9FR9LcVvEJPF7qJ7d5zTL4Bes2dk7RcacN9eSZ7OLohwxqhEvWu1+UxELyScgLbLLOdeVEGdwKI1iwVQ==",
-      "license": "MIT",
+      "version": "2.0.2",
+      "resolved": "https://registry.npmjs.org/@modelcontextprotocol/express/-/express-2.0.2.tgz",
+      "integrity": "sha512-lUvfV7gT/tgP8nLRs0ajUtgL+MlMNWWHAls5c9cf4PyBexq3EgmhWWrS4irQOC9OoKuUsHHcNjUw9urhHz542g==",
+      "license": "Apache-2.0",
       "dependencies": {
         "cors": "^2.8.5"
       },
@@ -691,7 +691,7 @@
         "node": ">=20"
       },
       "peerDependencies": {
-        "@modelcontextprotocol/server": "^2.0.0",
+        "@modelcontextprotocol/server": "^2.3.0",
         "express": "^4.18.0 || ^5.0.0"
       }
     },
diff --git a/package.json b/package.json
index fab631a..f73c473 100644
--- a/package.json
+++ b/package.json
@@ -26,7 +26,7 @@
     "node": ">=22"
   },
   "dependencies": {
-    "@modelcontextprotocol/express": "^2.0.0",
+    "@modelcontextprotocol/express": "^2.0.2",
     "@modelcontextprotocol/node": "^2.1.1",
     "@modelcontextprotocol/server": "^2.3.1",
     "busboy": "^1.6.0",