diff --git a/History.md b/History.md
index 69e7695678..21cf1b426c 100644
--- a/History.md
+++ b/History.md
@@ -6,6 +6,8 @@ unreleased
   * Fix incorrect middleware execution with unanchored `RegExp`s
   * Fix `res.jsonp(obj, status)` deprecation message
   * Fix typo in `res.is` JSDoc
+  * deps: content-disposition@0.5.4
+    - deps: safe-buffer@5.2.1
   * deps: cookie@0.4.1
     - Fix `maxAge` option to reject invalid values
   * deps: proxy-addr@~2.0.7
diff --git a/package.json b/package.json
index a40f44e9a6..024c78d31d 100644
--- a/package.json
+++ b/package.json
@@ -31,7 +31,7 @@
     "accepts": "~1.3.7",
     "array-flatten": "1.1.1",
     "body-parser": "1.19.0",
-    "content-disposition": "0.5.3",
+    "content-disposition": "0.5.4",
     "content-type": "~1.0.4",
     "cookie": "0.4.1",
     "cookie-signature": "1.0.6",