diff --git a/packages/apps/faucet/server/package.json b/packages/apps/faucet/server/package.json
index a8a2abc7e2..8a96c203e1 100644
--- a/packages/apps/faucet/server/package.json
+++ b/packages/apps/faucet/server/package.json
@@ -18,7 +18,7 @@
     "@human-protocol/sdk": "workspace:*",
     "axios": "^1.3.4",
     "body-parser": "^1.20.0",
-    "cors": "^2.8.5",
+    "cors": "^2.8.6",
     "express": "^5.2.1",
     "express-rate-limit": "^7.3.0",
     "node-cache": "^5.1.2",
diff --git a/yarn.lock b/yarn.lock
index 6963416d4e..a3888c341d 100644
--- a/yarn.lock
+++ b/yarn.lock
@@ -252,7 +252,7 @@ __metadata:
     axios: "npm:^1.3.4"
     body-parser: "npm:^1.20.0"
     concurrently: "npm:^9.1.2"
-    cors: "npm:^2.8.5"
+    cors: "npm:^2.8.6"
     eslint: "npm:^10.1.0"
     eslint-config-prettier: "npm:^10.1.8"
     eslint-plugin-prettier: "npm:^5.5.5"
@@ -16832,7 +16832,7 @@ __metadata:
   languageName: node
   linkType: hard
 
-"cors@npm:2.8.5, cors@npm:^2.8.5":
+"cors@npm:2.8.5":
   version: 2.8.5
   resolution: "cors@npm:2.8.5"
   dependencies:
@@ -16842,6 +16842,16 @@ __metadata:
   languageName: node
   linkType: hard
 
+"cors@npm:^2.8.6":
+  version: 2.8.6
+  resolution: "cors@npm:2.8.6"
+  dependencies:
+    object-assign: "npm:^4"
+    vary: "npm:^1"
+  checksum: 10c0/ab2bc57b8af8ef8476682a59647f7c55c1a7d406b559ac06119aa1c5f70b96d35036864d197b24cf86e228e4547231088f1f94ca05061dbb14d89cc0bc9d4cab
+  languageName: node
+  linkType: hard
+
 "cosmiconfig@npm:7.0.1":
   version: 7.0.1
   resolution: "cosmiconfig@npm:7.0.1"