diff --git a/packages/auth/package.json b/packages/auth/package.json
index 3468bc904b..6e04b9e38c 100644
--- a/packages/auth/package.json
+++ b/packages/auth/package.json
@@ -41,7 +41,7 @@
     "ioredis": "^5.3.2",
     "json-canonicalize": "^1.0.6",
     "knex": "^3.1.0",
-    "koa": "^2.15.2",
+    "koa": "^2.15.3",
     "koa-bodyparser": "^4.4.1",
     "koa-session": "^6.4.0",
     "objection": "^3.1.4",
diff --git a/packages/backend/package.json b/packages/backend/package.json
index b2bb7a136e..91a1dfcdfc 100644
--- a/packages/backend/package.json
+++ b/packages/backend/package.json
@@ -86,7 +86,7 @@
     "ioredis": "^5.3.2",
     "json-canonicalize": "^1.0.6",
     "knex": "^3.1.0",
-    "koa": "^2.15.2",
+    "koa": "^2.15.3",
     "koa-bodyparser": "^4.4.1",
     "lodash": "^4.17.21",
     "luxon": "^3.4.4",
diff --git a/pnpm-lock.yaml b/pnpm-lock.yaml
index 57855b93f6..9aac26c310 100644
--- a/pnpm-lock.yaml
+++ b/pnpm-lock.yaml
@@ -168,7 +168,7 @@ importers:
         version: 4.11.2(graphql@16.8.1)
       '@as-integrations/koa':
         specifier: ^1.1.1
-        version: 1.1.1(@apollo/server@4.11.2)(koa@2.15.2)
+        version: 1.1.1(@apollo/server@4.11.2)(koa@2.15.3)
       '@escape.tech/graphql-armor':
         specifier: ^2.4.0
         version: 2.4.0(@apollo/server@4.11.2)
@@ -218,8 +218,8 @@ importers:
         specifier: ^3.1.0
         version: 3.1.0(pg@8.11.3)
       koa:
-        specifier: ^2.15.2
-        version: 2.15.2
+        specifier: ^2.15.3
+        version: 2.15.3
       koa-bodyparser:
         specifier: ^4.4.1
         version: 4.4.1
@@ -316,7 +316,7 @@ importers:
         version: 4.11.2(graphql@16.8.1)
       '@as-integrations/koa':
         specifier: ^1.1.1
-        version: 1.1.1(@apollo/server@4.11.2)(koa@2.15.2)
+        version: 1.1.1(@apollo/server@4.11.2)(koa@2.15.3)
       '@escape.tech/graphql-armor':
         specifier: ^2.4.0
         version: 2.4.0(@apollo/server@4.11.2)
@@ -432,8 +432,8 @@ importers:
         specifier: ^3.1.0
         version: 3.1.0(pg@8.11.3)
       koa:
-        specifier: ^2.15.2
-        version: 2.15.2
+        specifier: ^2.15.3
+        version: 2.15.3
       koa-bodyparser:
         specifier: ^4.4.1
         version: 4.4.1
@@ -1093,7 +1093,7 @@ packages:
     transitivePeerDependencies:
       - encoding
 
-  /@as-integrations/koa@1.1.1(@apollo/server@4.11.2)(koa@2.15.2):
+  /@as-integrations/koa@1.1.1(@apollo/server@4.11.2)(koa@2.15.3):
     resolution: {integrity: sha512-v84cVhkLUxAH9l19pajbWp/Z9ZYTzO7jkAOiY1xndTclfpXZstiWDKejZYq7xpkBtUSSAKzNyM66uox8MP9qVg==}
     engines: {node: '>=16.0'}
     peerDependencies:
@@ -1101,7 +1101,7 @@ packages:
       koa: ^2.0.0
     dependencies:
       '@apollo/server': 4.11.2(graphql@16.8.1)
-      koa: 2.15.2
+      koa: 2.15.3
     dev: false
 
   /@astrojs/compiler@2.10.3:
@@ -13075,37 +13075,6 @@ packages:
       - supports-color
     dev: false
 
-  /koa@2.15.2:
-    resolution: {integrity: sha512-MXTeZH3M6AJ8ukW2QZ8wqO3Dcdfh2WRRmjCBkEP+NhKNCiqlO5RDqHmSnsyNrbRJrdjyvIGSJho4vQiWgQJSVA==}
-    engines: {node: ^4.8.4 || ^6.10.1 || ^7.10.1 || >= 8.1.4}
-    dependencies:
-      accepts: 1.3.8
-      cache-content-type: 1.0.1
-      content-disposition: 0.5.4
-      content-type: 1.0.5
-      cookies: 0.9.1
-      debug: 4.3.4
-      delegates: 1.0.0
-      depd: 2.0.0
-      destroy: 1.2.0
-      encodeurl: 1.0.2
-      escape-html: 1.0.3
-      fresh: 0.5.2
-      http-assert: 1.5.0
-      http-errors: 1.8.1
-      is-generator-function: 1.0.10
-      koa-compose: 4.1.0
-      koa-convert: 2.0.0
-      on-finished: 2.4.1
-      only: 0.0.2
-      parseurl: 1.3.3
-      statuses: 1.5.0
-      type-is: 1.6.18
-      vary: 1.1.2
-    transitivePeerDependencies:
-      - supports-color
-    dev: false
-
   /koa@2.15.3:
     resolution: {integrity: sha512-j/8tY9j5t+GVMLeioLaxweJiKUayFhlGqNTzf2ZGwL0ZCQijd2RLHK0SLW5Tsko8YyyqCZC2cojIb0/s62qTAg==}
     engines: {node: ^4.8.4 || ^6.10.1 || ^7.10.1 || >= 8.1.4}
@@ -16699,7 +16668,7 @@ packages:
     resolution: {integrity: sha512-X34iHADNbNDfr6OTStIAHWSAvvKQRYgLO6duASaVf7J2VA3lvmNYboAHOuLC2huav1IwgZJtyEcJCKVzFxOSMQ==}
     engines: {node: '>=8.6.0'}
     dependencies:
-      debug: 4.3.5
+      debug: 4.3.7(supports-color@9.4.0)
       module-details-from-path: 1.0.3
       resolve: 1.22.8
     transitivePeerDependencies: