diff --git a/packages/openneuro-server/package.json b/packages/openneuro-server/package.json
index 75e6d380b..2abec718a 100644
--- a/packages/openneuro-server/package.json
+++ b/packages/openneuro-server/package.json
@@ -32,7 +32,7 @@
     "draft-js-export-html": "^1.4.1",
     "elastic-apm-node": "3.49.1",
     "express": "4.18.2",
-    "graphql": "16.6.0",
+    "graphql": "16.8.1",
     "graphql-bigint": "^1.0.0",
     "graphql-compose": "9.0.10",
     "graphql-iso-date": "^3.6.1",