diff --git a/web/package.json b/web/package.json
index e037cb688c5b..4c6e5bd11e4e 100644
--- a/web/package.json
+++ b/web/package.json
@@ -208,6 +208,7 @@
     "diff": "3.5.0",
     "ejs": "3.1.10",
     "express": ">=4.19.2",
+    "express/path-to-regexp": "0.1.12",
     "follow-redirects": "^1.15.6",
     "ip": ">=2.0.1",
     "jpeg-js": "0.4.4",
diff --git a/web/yarn.lock b/web/yarn.lock
index 5464117fa7d3..d4ab0bd12e3d 100644
--- a/web/yarn.lock
+++ b/web/yarn.lock
@@ -14259,10 +14259,10 @@ path-scurry@^1.10.1:
     lru-cache "^9.1.1 || ^10.0.0"
     minipass "^5.0.0 || ^6.0.2 || ^7.0.0"
 
-path-to-regexp@0.1.10:
-  version "0.1.10"
-  resolved "https://registry.yarnpkg.com/path-to-regexp/-/path-to-regexp-0.1.10.tgz#67e9108c5c0551b9e5326064387de4763c4d5f8b"
-  integrity sha512-7lf7qcQidTku0Gu3YDPc8DJ1q7OOucfa/BSsIwjuh56VU7katFvuM8hULfkwB3Fns/rsVF7PwPKVw1sl5KQS9w==
+path-to-regexp@0.1.10, path-to-regexp@0.1.12:
+  version "0.1.12"
+  resolved "https://registry.yarnpkg.com/path-to-regexp/-/path-to-regexp-0.1.12.tgz#d5e1a12e478a976d432ef3c58d534b9923164bb7"
+  integrity sha512-RA1GjUVMnvYFxuqovrEqZoxxW5NUZqbwKtYz/Tt7nXerk0LbLblQmrsgdeOxV5SFHf0UDggjS/bSeOZwt1pmEQ==
 
 path-to-regexp@^1.7.0:
   version "1.9.0"