diff --git a/api/package-lock.json b/api/package-lock.json
index 6366317ed..2e13b503d 100644
--- a/api/package-lock.json
+++ b/api/package-lock.json
@@ -4072,9 +4072,9 @@
       "dev": true
     },
     "graphql": {
-      "version": "14.5.0",
-      "resolved": "https://registry.npmjs.org/graphql/-/graphql-14.5.0.tgz",
-      "integrity": "sha512-wnGcTD181L2xPnIwHHjx/moV4ulxA2Kms9zcUY+B/SIrK+2N+iOC6WNgnR2zVTmg1Z8P+CZq5KXibTnatg3WUw==",
+      "version": "14.5.3",
+      "resolved": "https://registry.npmjs.org/graphql/-/graphql-14.5.3.tgz",
+      "integrity": "sha512-W8A8nt9BsMg0ZK2qA3DJIVU6muWhxZRYLTmc+5XGwzWzVdUdPVlAAg5hTBjiTISEnzsKL/onasu6vl3kgGTbYg==",
       "requires": {
         "iterall": "^1.2.2"
       }
diff --git a/api/package.json b/api/package.json
index 022376c22..bf183938c 100644
--- a/api/package.json
+++ b/api/package.json
@@ -24,7 +24,7 @@
     "dotenv-safe": "^6.1.0",
     "express": "^4.17.1",
     "express-graphql": "^0.9.0",
-    "graphql": "^14.5.0",
+    "graphql": "^14.5.3",
     "graphql-custom-types": "^1.5.1",
     "graphql-upload": "^8.0.7",
     "lodash.unionby": "^4.8.0",