diff --git a/packages/server/package.json b/packages/server/package.json
index 928bbaa22..171cb4b66 100644
--- a/packages/server/package.json
+++ b/packages/server/package.json
@@ -25,7 +25,7 @@
     "@fortawesome/fontawesome-free": "^5.15.1",
     "@joplin/lib": "~2.9",
     "@joplin/renderer": "~2.9",
-    "@koa/cors": "^3.1.0",
+    "@koa/cors": "^4.0.0",
     "@types/uuid": "^8.3.1",
     "bcryptjs": "^2.4.3",
     "bulma": "^0.9.1",
diff --git a/yarn.lock b/yarn.lock
index 8914820cd..7bee1ac07 100644
--- a/yarn.lock
+++ b/yarn.lock
@@ -4435,7 +4435,7 @@ __metadata:
     "@joplin/lib": ~2.9
     "@joplin/renderer": ~2.9
     "@joplin/tools": ~2.9
-    "@koa/cors": ^3.1.0
+    "@koa/cors": ^4.0.0
     "@rmp135/sql-ts": ^1.12.1
     "@types/fs-extra": ^8.0.0
     "@types/jest": ^26.0.15
@@ -4617,12 +4617,12 @@ __metadata:
   languageName: node
   linkType: hard
 
-"@koa/cors@npm:^3.1.0":
-  version: 3.1.0
-  resolution: "@koa/cors@npm:3.1.0"
+"@koa/cors@npm:^4.0.0":
+  version: 4.0.0
+  resolution: "@koa/cors@npm:4.0.0"
   dependencies:
     vary: ^1.1.2
-  checksum: b6f18de404a967696fe19c9a8d35816e2a845be51f9aa49f1a8d31bbea095eaa20c35eceafe1b764a7e3a912052ca6eaf1965ac34b00020b1ec2823cb60a9b5d
+  checksum: e0760544823532f2d71d792e3076858e38bab9b1c090abea175f1319fd91ea58a1da384a2fe7f5108f1c681e3830b01f62a1cafe271d6406751976af443187aa
   languageName: node
   linkType: hard