diff --git a/api-server/package-lock.json b/api-server/package-lock.json
index 3d59b5b0f04b39..e2e051e1ac991e 100644
--- a/api-server/package-lock.json
+++ b/api-server/package-lock.json
@@ -8588,6 +8588,17 @@
           "version": "2.0.0",
           "resolved": "https://registry.npmjs.org/depd/-/depd-2.0.0.tgz",
           "integrity": "sha512-g7nH6P6dyDioJogAAGprGpCtVImJhpPk/roCzdb3fIh61/s/nPsfR6onyMwkCAR/OlC3yBC0lESvUoQEAssIrw=="
+        },
+        "helmet-csp": {
+          "version": "2.10.0",
+          "resolved": "https://registry.npmjs.org/helmet-csp/-/helmet-csp-2.10.0.tgz",
+          "integrity": "sha512-Rz953ZNEFk8sT2XvewXkYN0Ho4GEZdjAZy4stjiEQV3eN7GDxg1QKmYggH7otDyIA7uGA6XnUMVSgeJwbR5X+w==",
+          "requires": {
+            "bowser": "2.9.0",
+            "camelize": "1.0.0",
+            "content-security-policy-builder": "2.1.0",
+            "dasherize": "2.0.0"
+          }
         }
       }
     },
@@ -8597,15 +8608,9 @@
       "integrity": "sha512-AB4DTykRw3HCOxovD1nPR16hllrVImeFp5VBV9/twj66lJ2nU75DP8FPL0/Jp4jj79JhTfG+pFI2MD02kWJ+fA=="
     },
     "helmet-csp": {
-      "version": "2.10.0",
-      "resolved": "https://registry.npmjs.org/helmet-csp/-/helmet-csp-2.10.0.tgz",
-      "integrity": "sha512-Rz953ZNEFk8sT2XvewXkYN0Ho4GEZdjAZy4stjiEQV3eN7GDxg1QKmYggH7otDyIA7uGA6XnUMVSgeJwbR5X+w==",
-      "requires": {
-        "bowser": "2.9.0",
-        "camelize": "1.0.0",
-        "content-security-policy-builder": "2.1.0",
-        "dasherize": "2.0.0"
-      }
+      "version": "3.4.0",
+      "resolved": "https://registry.npmjs.org/helmet-csp/-/helmet-csp-3.4.0.tgz",
+      "integrity": "sha512-a+YgzWw6dajqhQfb6ktxil0FsQuWTKzrLSUfy55dxS8fuvl1jidTIMPZ2udN15mjjcpBPgTHNHGF5tyWKYyR8w=="
     },
     "hide-powered-by": {
       "version": "1.1.0",
diff --git a/api-server/package.json b/api-server/package.json
index 0726a0ee49918f..ab04e744823648 100644
--- a/api-server/package.json
+++ b/api-server/package.json
@@ -34,7 +34,7 @@
     "express-validator": "^6.9.2",
     "googleapis": "^42.0.0",
     "helmet": "^3.23.3",
-    "helmet-csp": "^2.10.0",
+    "helmet-csp": "^3.4.0",
     "jsonwebtoken": "^8.5.1",
     "lodash": "^4.17.20",
     "loopback": "^3.28.0",