diff --git a/package-lock.json b/package-lock.json
index 8d876bec94..71769de4f8 100644
--- a/package-lock.json
+++ b/package-lock.json
@@ -7533,9 +7533,9 @@
       "dev": true
     },
     "helmet": {
-      "version": "3.22.0",
-      "resolved": "https://registry.npmjs.org/helmet/-/helmet-3.22.0.tgz",
-      "integrity": "sha512-Xrqicn2nm1ZIUxP3YGuTBmbDL04neKsIT583Sjh0FkiwKDXYCMUqGqC88w3NUvVXtA75JyR2Jn6jw6ZEMOD+ZA==",
+      "version": "3.23.0",
+      "resolved": "https://registry.npmjs.org/helmet/-/helmet-3.23.0.tgz",
+      "integrity": "sha512-/AKPymGd+mJsFN43IkX+nf8J11V51bxLNYReQZmWrVx7M/FEOs2OEE6U1YIt8Y00rpOupbIeVWv5woEGja1Pug==",
       "requires": {
         "depd": "2.0.0",
         "dns-prefetch-control": "0.2.0",
diff --git a/package.json b/package.json
index 7f57ce9492..fe093ecf40 100644
--- a/package.json
+++ b/package.json
@@ -37,7 +37,7 @@
     "gulp-nodemon": "^2.5.0",
     "gulp.spritesmith": "^6.9.0",
     "habitica-markdown": "^2.0.2",
-    "helmet": "^3.22.0",
+    "helmet": "^3.23.0",
     "image-size": "^0.8.3",
     "in-app-purchase": "^1.11.3",
     "js2xmlparser": "^4.0.1",