diff --git a/package-lock.json b/package-lock.json
index dc29ab92e4..b9ef4e8d48 100644
--- a/package-lock.json
+++ b/package-lock.json
@@ -8296,9 +8296,9 @@
       "dev": true
     },
     "helmet": {
-      "version": "4.6.0",
-      "resolved": "https://registry.npmjs.org/helmet/-/helmet-4.6.0.tgz",
-      "integrity": "sha512-HVqALKZlR95ROkrnesdhbbZJFi/rIVSoNq6f3jA/9u6MIbTsPh3xZwihjeI5+DO/2sOV6HMHooXcEOuwskHpTg=="
+      "version": "5.0.1",
+      "resolved": "https://registry.npmjs.org/helmet/-/helmet-5.0.1.tgz",
+      "integrity": "sha512-iyYpGYH2nbQVaQtauYDnemWg45S2RyGvJ+iKj+V9jp7Dc1NTtAJHmD+hFOSYS7Xdwe1GeyVEYSydggXLOg6TKQ=="
     },
     "hex2dec": {
       "version": "1.1.2",
diff --git a/package.json b/package.json
index 9ec2b58f97..7b7ae00dcc 100644
--- a/package.json
+++ b/package.json
@@ -38,7 +38,7 @@
     "gulp-nodemon": "^2.5.0",
     "gulp.spritesmith": "^6.12.1",
     "habitica-markdown": "^3.0.0",
-    "helmet": "^4.6.0",
+    "helmet": "^5.0.1",
     "image-size": "^1.0.1",
     "in-app-purchase": "^1.11.3",
     "js2xmlparser": "^4.0.2",