diff --git a/History.md b/History.md
index 77810b039d..05371e1649 100644
--- a/History.md
+++ b/History.md
@@ -2,6 +2,8 @@ unreleased
 ==========
 
   * Deprecate `res.location("back")` and `res.redirect("back")` magic string
+  * deps: serve-static@1.16.2
+    * includes send@0.19.0
   * deps: finalhandler@1.3.1
 
 4.20.0 / 2024-09-10
diff --git a/package.json b/package.json
index b451f74ac7..eb93352cb4 100644
--- a/package.json
+++ b/package.json
@@ -53,7 +53,7 @@
     "range-parser": "~1.2.1",
     "safe-buffer": "5.2.1",
     "send": "0.19.0",
-    "serve-static": "1.16.0",
+    "serve-static": "1.16.2",
     "setprototypeof": "1.2.0",
     "statuses": "2.0.1",
     "type-is": "~1.6.18",