diff --git a/apps/live/package.json b/apps/live/package.json
index 8cfe975d99..8b8e1c3ad2 100644
--- a/apps/live/package.json
+++ b/apps/live/package.json
@@ -42,7 +42,7 @@
     "compression": "1.8.1",
     "cors": "^2.8.5",
     "dotenv": "^16.4.5",
-    "express": "^4.21.2",
+    "express": "catalog:",
     "express-ws": "^5.0.2",
     "helmet": "^7.1.0",
     "ioredis": "5.7.0",
diff --git a/pnpm-lock.yaml b/pnpm-lock.yaml
index b02ffedc8c..bbd41f5dde 100644
--- a/pnpm-lock.yaml
+++ b/pnpm-lock.yaml
@@ -57,6 +57,9 @@ catalogs:
     axios:
       specifier: 1.12.0
       version: 1.12.0
+    express:
+      specifier: 4.22.0
+      version: 4.22.0
     lodash-es:
       specifier: 4.17.21
       version: 4.17.21
@@ -310,11 +313,11 @@ importers:
         specifier: ^16.4.5
         version: 16.6.1
       express:
-        specifier: ^4.21.2
-        version: 4.21.2
+        specifier: 'catalog:'
+        version: 4.22.0
       express-ws:
         specifier: ^5.0.2
-        version: 5.0.2(express@4.21.2)
+        version: 5.0.2(express@4.22.0)
       helmet:
         specifier: ^7.1.0
         version: 7.2.0
@@ -5701,6 +5704,10 @@ packages:
     resolution: {integrity: sha512-28HqgMZAmih1Czt9ny7qr6ek2qddF4FclbMzwhCREB6OFfH+rXAnuNCwo1/wFvrtbgsQDb4kSbX9de9lFbrXnA==}
     engines: {node: '>= 0.10.0'}
 
+  express@4.22.0:
+    resolution: {integrity: sha512-c2iPh3xp5vvCLgaHK03+mWLFPhox7j1LwyxcZwFVApEv5i0X+IjPpbT50SJJwwLpdBVfp45AkK/v+AFgv/XlfQ==}
+    engines: {node: '>= 0.10.0'}
+
   extend@3.0.2:
     resolution: {integrity: sha512-fjquC59cD7CyW6urNXK0FBufkZcoiGG80wTuPujX590cB5Ttln20E2UB4S/WARVqhXffZl2LNgS+gQdPIIim/g==}
 
@@ -13846,9 +13853,9 @@ snapshots:
       lodash: 4.17.21
       winston: 3.17.0
 
-  express-ws@5.0.2(express@4.21.2):
+  express-ws@5.0.2(express@4.22.0):
     dependencies:
-      express: 4.21.2
+      express: 4.22.0
       ws: 7.5.10
     transitivePeerDependencies:
       - bufferutil
@@ -13890,6 +13897,42 @@ snapshots:
     transitivePeerDependencies:
       - supports-color
 
+  express@4.22.0:
+    dependencies:
+      accepts: 1.3.8
+      array-flatten: 1.1.1
+      body-parser: 1.20.3
+      content-disposition: 0.5.4
+      content-type: 1.0.5
+      cookie: 0.7.1
+      cookie-signature: 1.0.6
+      debug: 2.6.9
+      depd: 2.0.0
+      encodeurl: 2.0.0
+      escape-html: 1.0.3
+      etag: 1.8.1
+      finalhandler: 1.3.1
+      fresh: 0.5.2
+      http-errors: 2.0.0
+      merge-descriptors: 1.0.3
+      methods: 1.1.2
+      on-finished: 2.4.1
+      parseurl: 1.3.3
+      path-to-regexp: 0.1.12
+      proxy-addr: 2.0.7
+      qs: 6.14.0
+      range-parser: 1.2.1
+      safe-buffer: 5.2.1
+      send: 0.19.0
+      serve-static: 1.16.2
+      setprototypeof: 1.2.0
+      statuses: 2.0.1
+      type-is: 1.6.18
+      utils-merge: 1.0.1
+      vary: 1.1.2
+    transitivePeerDependencies:
+      - supports-color
+
   extend@3.0.2: {}
 
   fast-deep-equal@3.1.3: {}
diff --git a/pnpm-workspace.yaml b/pnpm-workspace.yaml
index 746ea5db5c..1909a9037d 100644
--- a/pnpm-workspace.yaml
+++ b/pnpm-workspace.yaml
@@ -22,6 +22,7 @@ catalog:
   "@types/react-dom": 18.3.1
   "@types/react": 18.3.11
   axios: 1.12.0
+  express: 4.22.0
   lodash-es: 4.17.21
   lucide-react: 0.469.0
   mobx-react: 9.1.1