diff --git a/package.json b/package.json
index a8f34e4e..2d553c7f 100644
--- a/package.json
+++ b/package.json
@@ -10,11 +10,11 @@
   "repository": "expressjs/session",
   "license": "MIT",
   "dependencies": {
-    "cookie": "0.4.0",
+    "cookie": "0.7.0",
     "cookie-signature": "1.0.6",
     "debug": "2.6.9",
     "depd": "~2.0.0",
-    "on-headers": "~1.0.2",
+    "on-headers": "~1.1.0",
     "parseurl": "~1.3.3",
     "safe-buffer": "5.2.0",
     "uid-safe": "~2.1.5"
@@ -24,7 +24,7 @@
     "cookie-parser": "1.4.4",
     "eslint": "3.19.0",
     "eslint-plugin-markdown": "1.0.0",
-    "express": "4.17.1",
+    "express": "4.20.0",
     "mocha": "6.2.0",
     "nyc": "14.1.1",
     "supertest": "4.0.2"