diff --git a/apps/server/package.json b/apps/server/package.json
index b4f60e4ef..5c36da759 100644
--- a/apps/server/package.json
+++ b/apps/server/package.json
@@ -65,7 +65,7 @@
     "escape-html": "1.0.3",
     "express": "5.1.0",
     "express-openid-connect": "^2.17.1",
-    "express-rate-limit": "7.5.1",
+    "express-rate-limit": "8.0.0",
     "express-session": "1.18.1",
     "file-uri-to-path": "2.0.0",
     "fs-extra": "11.3.0",
diff --git a/pnpm-lock.yaml b/pnpm-lock.yaml
index 15f07b574..f6e7fb8e1 100644
--- a/pnpm-lock.yaml
+++ b/pnpm-lock.yaml
@@ -652,8 +652,8 @@ importers:
         specifier: ^2.17.1
         version: 2.18.1(express@5.1.0)
       express-rate-limit:
-        specifier: 7.5.1
-        version: 7.5.1(express@5.1.0)
+        specifier: 8.0.0
+        version: 8.0.0(express@5.1.0)
       express-session:
         specifier: 1.18.1
         version: 1.18.1
@@ -8405,8 +8405,8 @@ packages:
     peerDependencies:
       express: '>= 4.17.0'
 
-  express-rate-limit@7.5.1:
-    resolution: {integrity: sha512-7iN8iPMDzOMHPUYllBEsQdWVB6fPDMPqwjBaFrgr4Jgr/+okjvzAy+UHlYYL/Vs0OsOrMkwS6PJDkFlJwoxUnw==}
+  express-rate-limit@8.0.0:
+    resolution: {integrity: sha512-FXEAp2ccTeN1ZSO+sPHRHWB0/CrTP5asFBjUaNeD9A0v3iPmgFbLu24vqPjiM9utszI58VGlMokjXQ0W9Dbmjw==}
     engines: {node: '>= 16'}
     peerDependencies:
       express: '>= 4.11'
@@ -9378,6 +9378,9 @@ packages:
     resolution: {integrity: sha512-B9ZWJxHHOHUhUjCPrMpLD4xEq35bUTClHM1S6CBU5ixQnkZmwipwgc96vAd7AAGM9TGHvJR+Uss+/Ak6UphK+Q==}
     engines: {node: '>=8'}
 
+  ip@2.0.1:
+    resolution: {integrity: sha512-lJUL9imLTNi1ZfXT+DU6rBBdbiKGBuay9B6xGSPVjUeQwaH1RIGqef8RZkUtHioLmSNpPR5M4HVKJGm1j8FWVQ==}
+
   ipaddr.js@1.9.1:
     resolution: {integrity: sha512-0KI/607xoxSToH7GjN1FfSbLoU0+btTicjsQSWQlh/hZykN8KpmMf7uYwPW3R+akZ6R/w18ZlXSHBYXiYUPO3g==}
     engines: {node: '>= 0.10'}
@@ -24800,9 +24803,10 @@ snapshots:
     transitivePeerDependencies:
       - supports-color
 
-  express-rate-limit@7.5.1(express@5.1.0):
+  express-rate-limit@8.0.0(express@5.1.0):
     dependencies:
       express: 5.1.0
+      ip: 2.0.1
 
   express-session@1.18.1:
     dependencies:
@@ -26021,6 +26025,8 @@ snapshots:
 
   ip-regex@4.3.0: {}
 
+  ip@2.0.1: {}
+
   ipaddr.js@1.9.1: {}
 
   ipaddr.js@2.2.0: {}