diff --git a/package.json b/package.json
index 12f05348..741e9d70 100644
--- a/package.json
+++ b/package.json
@@ -32,7 +32,7 @@
     "cookie-parser": "^1.3.3",
     "copy-to": "^1.0.1",
     "counter-cache": "^0.1.0",
-    "csrf": "^2.0.1",
+    "csrf": "^3.0.6",
     "deepmerge": "^0.2.7",
     "depd": "^1.0.0",
     "express": "^4.8.4",