diff --git a/sandbox/package-lock.json b/sandbox/package-lock.json
index a539cf2a3..95b066a3d 100644
--- a/sandbox/package-lock.json
+++ b/sandbox/package-lock.json
@@ -9,7 +9,7 @@
       "version": "1.0.0",
       "license": "(MIT OR OGL)",
       "dependencies": {
-        "@hapi/hapi": "^21.4.3",
+        "@hapi/hapi": "^21.4.4",
         "@hapi/inert": "^7.1.0",
         "lodash": "^4.17.20"
       },
@@ -254,9 +254,9 @@
       "integrity": "sha512-w+lKW+yRrLhJu620jT3y+5g2mHqnKfepreykvdOcl9/6up8GrQQn+l3FRTsjHTKbkbfQFkuksHpdv2EcpKcJ4Q=="
     },
     "node_modules/@hapi/hapi": {
-      "version": "21.4.3",
-      "resolved": "https://registry.npmjs.org/@hapi/hapi/-/hapi-21.4.3.tgz",
-      "integrity": "sha512-Q7g0ZY4gxU69wabFKH75qR0AFOdiOECj6vGqTHBSO5Lrwe6TwD8r9LkYQIbvtG8N423VDpdVsiZP8MnBwmD6Hw==",
+      "version": "21.4.4",
+      "resolved": "https://registry.npmjs.org/@hapi/hapi/-/hapi-21.4.4.tgz",
+      "integrity": "sha512-vI6JPLR99WZDKI1nriD0qXDPp8sKFkZfNVGrDDZafDQ8jU+3ERMwS0vPac5aGae6yyyoGZGOBiYExw4N8ScSTQ==",
       "dependencies": {
         "@hapi/accept": "^6.0.3",
         "@hapi/ammo": "^6.0.1",
@@ -271,9 +271,9 @@
         "@hapi/podium": "^5.0.2",
         "@hapi/shot": "^6.0.2",
         "@hapi/somever": "^4.1.1",
-        "@hapi/statehood": "^8.2.0",
+        "@hapi/statehood": "^8.2.1",
         "@hapi/subtext": "^8.1.1",
-        "@hapi/teamwork": "^6.0.0",
+        "@hapi/teamwork": "^6.0.1",
         "@hapi/topo": "^6.0.2",
         "@hapi/validate": "^2.0.1"
       },
@@ -391,10 +391,9 @@
       }
     },
     "node_modules/@hapi/statehood": {
-      "version": "8.2.0",
-      "resolved": "https://registry.npmjs.org/@hapi/statehood/-/statehood-8.2.0.tgz",
-      "integrity": "sha512-63JlCVIrsmuunWsyc3OeuFO+gH6v56swLCl7OM1w09l/exQKPUxSUDF2Slkuw8k91nIzr0A2/aPvjLOWf9ksrg==",
-      "license": "BSD-3-Clause",
+      "version": "8.2.1",
+      "resolved": "https://registry.npmjs.org/@hapi/statehood/-/statehood-8.2.1.tgz",
+      "integrity": "sha512-xf72TG/QINW26jUu+uL5H+crE1o8GplIgfPWwPZhnAGJzetIVAQEQYvzq+C0aEVHg5/lMMtQ+L9UryuSa5Yjkg==",
       "dependencies": {
         "@hapi/boom": "^10.0.1",
         "@hapi/bounce": "^3.0.1",
@@ -1565,9 +1564,9 @@
       "integrity": "sha512-w+lKW+yRrLhJu620jT3y+5g2mHqnKfepreykvdOcl9/6up8GrQQn+l3FRTsjHTKbkbfQFkuksHpdv2EcpKcJ4Q=="
     },
     "@hapi/hapi": {
-      "version": "21.4.3",
-      "resolved": "https://registry.npmjs.org/@hapi/hapi/-/hapi-21.4.3.tgz",
-      "integrity": "sha512-Q7g0ZY4gxU69wabFKH75qR0AFOdiOECj6vGqTHBSO5Lrwe6TwD8r9LkYQIbvtG8N423VDpdVsiZP8MnBwmD6Hw==",
+      "version": "21.4.4",
+      "resolved": "https://registry.npmjs.org/@hapi/hapi/-/hapi-21.4.4.tgz",
+      "integrity": "sha512-vI6JPLR99WZDKI1nriD0qXDPp8sKFkZfNVGrDDZafDQ8jU+3ERMwS0vPac5aGae6yyyoGZGOBiYExw4N8ScSTQ==",
       "requires": {
         "@hapi/accept": "^6.0.3",
         "@hapi/ammo": "^6.0.1",
@@ -1582,9 +1581,9 @@
         "@hapi/podium": "^5.0.2",
         "@hapi/shot": "^6.0.2",
         "@hapi/somever": "^4.1.1",
-        "@hapi/statehood": "^8.2.0",
+        "@hapi/statehood": "^8.2.1",
         "@hapi/subtext": "^8.1.1",
-        "@hapi/teamwork": "^6.0.0",
+        "@hapi/teamwork": "^6.0.1",
         "@hapi/topo": "^6.0.2",
         "@hapi/validate": "^2.0.1"
       }
@@ -1695,9 +1694,9 @@
       }
     },
     "@hapi/statehood": {
-      "version": "8.2.0",
-      "resolved": "https://registry.npmjs.org/@hapi/statehood/-/statehood-8.2.0.tgz",
-      "integrity": "sha512-63JlCVIrsmuunWsyc3OeuFO+gH6v56swLCl7OM1w09l/exQKPUxSUDF2Slkuw8k91nIzr0A2/aPvjLOWf9ksrg==",
+      "version": "8.2.1",
+      "resolved": "https://registry.npmjs.org/@hapi/statehood/-/statehood-8.2.1.tgz",
+      "integrity": "sha512-xf72TG/QINW26jUu+uL5H+crE1o8GplIgfPWwPZhnAGJzetIVAQEQYvzq+C0aEVHg5/lMMtQ+L9UryuSa5Yjkg==",
       "requires": {
         "@hapi/boom": "^10.0.1",
         "@hapi/bounce": "^3.0.1",
diff --git a/sandbox/package.json b/sandbox/package.json
index 0c1eba60a..92b383c9b 100644
--- a/sandbox/package.json
+++ b/sandbox/package.json
@@ -12,7 +12,7 @@
   "homepage": "https://github.com/NHSDigital/hello-world-api",
   "main": "app.js",
   "dependencies": {
-    "@hapi/hapi": "^21.4.3",
+    "@hapi/hapi": "^21.4.4",
     "@hapi/inert": "^7.1.0",
     "lodash": "^4.17.20"
   },