diff --git a/.changeset/heavy-mails-juggle.md b/.changeset/heavy-mails-juggle.md
new file mode 100644
index 00000000..02657b61
--- /dev/null
+++ b/.changeset/heavy-mails-juggle.md
@@ -0,0 +1,5 @@
+---
+"@hyperdx/api": patch
+---
+
+chore: update deps for http-proxy-middleware
diff --git a/packages/api/package.json b/packages/api/package.json
index daa9784f..9633a91f 100644
--- a/packages/api/package.json
+++ b/packages/api/package.json
@@ -30,7 +30,7 @@
     "extract-domain": "^2.4.1",
     "handlebars": "^4.7.8",
     "http-graceful-shutdown": "^3.1.13",
-    "http-proxy-middleware": "^3.0.3",
+    "http-proxy-middleware": "^3.0.5",
     "jsonwebtoken": "^9.0.0",
     "lodash": "^4.17.21",
     "minimist": "^1.2.7",
diff --git a/packages/app/package.json b/packages/app/package.json
index ed29a6e4..b5b62755 100644
--- a/packages/app/package.json
+++ b/packages/app/package.json
@@ -54,7 +54,7 @@
     "date-fns": "^2.28.0",
     "date-fns-tz": "^2.0.0",
     "fuse.js": "^6.6.2",
-    "http-proxy-middleware": "^3.0.3",
+    "http-proxy-middleware": "^3.0.5",
     "immer": "^9.0.21",
     "jotai": "^2.5.1",
     "ky": "^0.30.0",
diff --git a/yarn.lock b/yarn.lock
index 85b99720..1c7bf350 100644
--- a/yarn.lock
+++ b/yarn.lock
@@ -4301,7 +4301,7 @@ __metadata:
     extract-domain: "npm:^2.4.1"
     handlebars: "npm:^4.7.8"
     http-graceful-shutdown: "npm:^3.1.13"
-    http-proxy-middleware: "npm:^3.0.3"
+    http-proxy-middleware: "npm:^3.0.5"
     jest: "npm:^28.1.3"
     jsonwebtoken: "npm:^9.0.0"
     lodash: "npm:^4.17.21"
@@ -4403,7 +4403,7 @@ __metadata:
     date-fns: "npm:^2.28.0"
     date-fns-tz: "npm:^2.0.0"
     fuse.js: "npm:^6.6.2"
-    http-proxy-middleware: "npm:^3.0.3"
+    http-proxy-middleware: "npm:^3.0.5"
     identity-obj-proxy: "npm:^3.0.0"
     immer: "npm:^9.0.21"
     jest: "npm:^28.1.3"
@@ -17507,9 +17507,9 @@ __metadata:
   languageName: node
   linkType: hard
 
-"http-proxy-middleware@npm:^3.0.3":
-  version: 3.0.3
-  resolution: "http-proxy-middleware@npm:3.0.3"
+"http-proxy-middleware@npm:^3.0.5":
+  version: 3.0.5
+  resolution: "http-proxy-middleware@npm:3.0.5"
   dependencies:
     "@types/http-proxy": "npm:^1.17.15"
     debug: "npm:^4.3.6"
@@ -17517,7 +17517,7 @@ __metadata:
     is-glob: "npm:^4.0.3"
     is-plain-object: "npm:^5.0.0"
     micromatch: "npm:^4.0.8"
-  checksum: 10c0/c4d68a10d8d42f02e59f7dc8249c98d1ac03aecee177b42c2d8b6a0cb6b71c6688e759e5387f4cdb570150070ca1c6808b38010cbdf67f4500a2e75671a36e05
+  checksum: 10c0/89ff3c8fe65b22b8042a6173ae1b8f77c5171f7eecf3c8b5d6dcffe3c9d688acae7bcf498cc08d1525f566dc0781efaec4e2ddc49224b1f16f020de7987a446b
   languageName: node
   linkType: hard