diff --git a/sandbox/package-lock.json b/sandbox/package-lock.json
index 0c4a38f9f..6bb92b41f 100644
--- a/sandbox/package-lock.json
+++ b/sandbox/package-lock.json
@@ -9,7 +9,7 @@
       "version": "1.0.0",
       "license": "(MIT OR OGL)",
       "dependencies": {
-        "@hapi/hapi": "^21.4.0",
+        "@hapi/hapi": "^21.4.2",
         "@hapi/inert": "^7.1.0",
         "lodash": "^4.17.20"
       },
@@ -256,10 +256,9 @@
       "integrity": "sha512-w+lKW+yRrLhJu620jT3y+5g2mHqnKfepreykvdOcl9/6up8GrQQn+l3FRTsjHTKbkbfQFkuksHpdv2EcpKcJ4Q=="
     },
     "node_modules/@hapi/hapi": {
-      "version": "21.4.0",
-      "resolved": "https://registry.npmjs.org/@hapi/hapi/-/hapi-21.4.0.tgz",
-      "integrity": "sha512-kqiRWbYYLSSt2rYbxyNj8svPsXP715p4W/K3OXpXeiiVLNSdBX4f+zfmC+dY6eyb6rqTqTAbx6x8b5HpJTkviQ==",
-      "license": "BSD-3-Clause",
+      "version": "21.4.2",
+      "resolved": "https://registry.npmjs.org/@hapi/hapi/-/hapi-21.4.2.tgz",
+      "integrity": "sha512-wkjpjc80Hnl0cBfDAG+EtX876AGtpg9fpt6q9GXTnGyoW5C4+hBCem8MmBPuwlhlfJ9U9FYGm3Yf7nWp9+/NDQ==",
       "dependencies": {
         "@hapi/accept": "^6.0.3",
         "@hapi/ammo": "^6.0.1",
@@ -409,9 +408,9 @@
       }
     },
     "node_modules/@hapi/subtext": {
-      "version": "8.1.0",
-      "resolved": "https://registry.npmjs.org/@hapi/subtext/-/subtext-8.1.0.tgz",
-      "integrity": "sha512-PyaN4oSMtqPjjVxLny1k0iYg4+fwGusIhaom9B2StinBclHs7v46mIW706Y+Wo21lcgulGyXbQrmT/w4dus6ww==",
+      "version": "8.1.1",
+      "resolved": "https://registry.npmjs.org/@hapi/subtext/-/subtext-8.1.1.tgz",
+      "integrity": "sha512-ex1Y2s/KuJktS8Ww0k6XJ5ysSKrzNym4i5pDVuCwlSgHHviHUsT1JNzE6FYhNU9TTHSNdyfue/t2m89bpkX9Jw==",
       "dependencies": {
         "@hapi/boom": "^10.0.1",
         "@hapi/bourne": "^3.0.0",
@@ -1585,9 +1584,9 @@
       "integrity": "sha512-w+lKW+yRrLhJu620jT3y+5g2mHqnKfepreykvdOcl9/6up8GrQQn+l3FRTsjHTKbkbfQFkuksHpdv2EcpKcJ4Q=="
     },
     "@hapi/hapi": {
-      "version": "21.4.0",
-      "resolved": "https://registry.npmjs.org/@hapi/hapi/-/hapi-21.4.0.tgz",
-      "integrity": "sha512-kqiRWbYYLSSt2rYbxyNj8svPsXP715p4W/K3OXpXeiiVLNSdBX4f+zfmC+dY6eyb6rqTqTAbx6x8b5HpJTkviQ==",
+      "version": "21.4.2",
+      "resolved": "https://registry.npmjs.org/@hapi/hapi/-/hapi-21.4.2.tgz",
+      "integrity": "sha512-wkjpjc80Hnl0cBfDAG+EtX876AGtpg9fpt6q9GXTnGyoW5C4+hBCem8MmBPuwlhlfJ9U9FYGm3Yf7nWp9+/NDQ==",
       "requires": {
         "@hapi/accept": "^6.0.3",
         "@hapi/ammo": "^6.0.1",
@@ -1729,9 +1728,9 @@
       }
     },
     "@hapi/subtext": {
-      "version": "8.1.0",
-      "resolved": "https://registry.npmjs.org/@hapi/subtext/-/subtext-8.1.0.tgz",
-      "integrity": "sha512-PyaN4oSMtqPjjVxLny1k0iYg4+fwGusIhaom9B2StinBclHs7v46mIW706Y+Wo21lcgulGyXbQrmT/w4dus6ww==",
+      "version": "8.1.1",
+      "resolved": "https://registry.npmjs.org/@hapi/subtext/-/subtext-8.1.1.tgz",
+      "integrity": "sha512-ex1Y2s/KuJktS8Ww0k6XJ5ysSKrzNym4i5pDVuCwlSgHHviHUsT1JNzE6FYhNU9TTHSNdyfue/t2m89bpkX9Jw==",
       "requires": {
         "@hapi/boom": "^10.0.1",
         "@hapi/bourne": "^3.0.0",
diff --git a/sandbox/package.json b/sandbox/package.json
index b5dd5a624..e6ed0c8cc 100644
--- a/sandbox/package.json
+++ b/sandbox/package.json
@@ -12,7 +12,7 @@
   "homepage": "https://github.com/NHSDigital/hello-world-api",
   "main": "app.js",
   "dependencies": {
-    "@hapi/hapi": "^21.4.0",
+    "@hapi/hapi": "^21.4.2",
     "@hapi/inert": "^7.1.0",
     "lodash": "^4.17.20"
   },