diff --git a/pnpm-lock.yaml b/pnpm-lock.yaml
index ecdc88d369c..116f22a8f85 100644
--- a/pnpm-lock.yaml
+++ b/pnpm-lock.yaml
@@ -224,8 +224,8 @@ importers:
         specifier: ^5.2.1
         version: 5.2.1(supports-color@8.1.1)
       express-rate-limit:
-        specifier: ^8.5.1
-        version: 8.5.2(express@5.2.1(supports-color@8.1.1))
+        specifier: ^8.6.0
+        version: 8.6.0(express@5.2.1(supports-color@8.1.1))
       express-session:
         specifier: ^1.19.0
         version: 1.19.0
@@ -3201,8 +3201,8 @@ packages:
     resolution: {integrity: sha512-KfYbmpRm0VbLjEvVa9yGwCi9GI34xvi7A/HXYWQO65CSD2u3MczUJSuwXKFIxlGsgBQizV9q5J9NHj4VG0n+pA==}
     engines: {node: '>=12.0.0'}
 
-  express-rate-limit@8.5.2:
-    resolution: {integrity: sha512-5Kb34ipNX694DH48vN9irak1Qx30nb0PLYHXfJgw4YEjiC3ZEmZJhwOp+VfiCYwFzvFTdB9QkArYS5kXa2cx2A==}
+  express-rate-limit@8.6.0:
+    resolution: {integrity: sha512-XKJXDsASUOo0LLtFwW5hCcQGH0N4WQc/Rn8/Pvoia+TJFOkkFPvrtW9lZOeeNcxQJspvOIERMwiRLsVFlhHEkA==}
     engines: {node: '>= 16'}
     peerDependencies:
       express: '>= 4.11'
@@ -8578,10 +8578,13 @@ snapshots:
 
   expect-type@1.4.0: {}
 
-  express-rate-limit@8.5.2(express@5.2.1(supports-color@8.1.1)):
+  express-rate-limit@8.6.0(express@5.2.1(supports-color@8.1.1)):
     dependencies:
+      debug: 4.4.3(supports-color@8.1.1)
       express: 5.2.1(supports-color@8.1.1)
       ip-address: 10.2.0
+    transitivePeerDependencies:
+      - supports-color
 
   express-session@1.19.0:
     dependencies:
diff --git a/src/package.json b/src/package.json
index 9dd30929e47..938a64d7402 100644
--- a/src/package.json
+++ b/src/package.json
@@ -40,7 +40,7 @@
     "ejs": "^6.0.1",
     "esbuild": "^0.28.1",
     "express": "^5.2.1",
-    "express-rate-limit": "^8.5.1",
+    "express-rate-limit": "^8.6.0",
     "express-session": "^1.19.0",
     "formidable": "^3.5.4",
     "html-to-docx": "^1.8.0",