diff --git a/package-lock.json b/package-lock.json
index 63b2095..05f16ee 100644
--- a/package-lock.json
+++ b/package-lock.json
@@ -25,7 +25,7 @@
                 "compression": "~1.8.1",
                 "dotenv": "~17.4.1",
                 "express": "~5.2.1",
-                "express-rate-limit": "~8.3.2",
+                "express-rate-limit": "~8.5.1",
                 "express-session": "~1.19.0",
                 "express-validator": "~7.3.2",
                 "govuk-frontend": "~6.1.0",
@@ -9569,12 +9569,12 @@
             }
         },
         "node_modules/express-rate-limit": {
-            "version": "8.3.2",
-            "resolved": "https://registry.npmjs.org/express-rate-limit/-/express-rate-limit-8.3.2.tgz",
-            "integrity": "sha512-77VmFeJkO0/rvimEDuUC5H30oqUC4EyOhyGccfqoLebB0oiEYfM7nwPrsDsBL1gsTpwfzX8SFy2MT3TDyRq+bg==",
+            "version": "8.5.1",
+            "resolved": "https://registry.npmjs.org/express-rate-limit/-/express-rate-limit-8.5.1.tgz",
+            "integrity": "sha512-5O6KYmyJEpuPJV5hNTXKbAHWRqrzyu+OI3vUnSd2kXFubIVpG7ezpgxQy76Zo5GQZtrQBg86hF+CM/NX+cioiQ==",
             "license": "MIT",
             "dependencies": {
-                "ip-address": "10.1.0"
+                "ip-address": "^10.2.0"
             },
             "engines": {
                 "node": ">= 16"
@@ -10603,9 +10603,9 @@
             }
         },
         "node_modules/ip-address": {
-            "version": "10.1.0",
-            "resolved": "https://registry.npmjs.org/ip-address/-/ip-address-10.1.0.tgz",
-            "integrity": "sha512-XXADHxXmvT9+CRxhXg56LJovE+bmWnEWB78LB83VZTprKTmaC5QfruXocxzTZ2Kl0DNwKuBdlIhjL8LeY8Sf8Q==",
+            "version": "10.2.0",
+            "resolved": "https://registry.npmjs.org/ip-address/-/ip-address-10.2.0.tgz",
+            "integrity": "sha512-/+S6j4E9AHvW9SWMSEY9Xfy66O5PWvVEJ08O0y5JGyEKQpojb0K0GKpz/v5HJ/G0vi3D2sjGK78119oXZeE0qA==",
             "license": "MIT",
             "engines": {
                 "node": ">= 12"
diff --git a/package.json b/package.json
index 3633970..d30f145 100644
--- a/package.json
+++ b/package.json
@@ -74,7 +74,7 @@
         "compression": "~1.8.1",
         "dotenv": "~17.4.1",
         "express": "~5.2.1",
-        "express-rate-limit": "~8.3.2",
+        "express-rate-limit": "~8.5.1",
         "express-session": "~1.19.0",
         "express-validator": "~7.3.2",
         "govuk-frontend": "~6.1.0",