diff --git a/libraries/mongo-utils/package.json b/libraries/mongo-utils/package.json
index 8bbdad49ba..716f0b0aa2 100644
--- a/libraries/mongo-utils/package.json
+++ b/libraries/mongo-utils/package.json
@@ -16,8 +16,8 @@
   "author": "Overleaf (https://www.overleaf.com)",
   "license": "AGPL-3.0-only",
   "dependencies": {
-    "mongodb": "6.7.0",
-    "mongodb-legacy": "6.1.0"
+    "mongodb": "6.10.0",
+    "mongodb-legacy": "6.1.3"
   },
   "devDependencies": {
     "chai": "^4.3.6",
diff --git a/libraries/object-persistor/package.json b/libraries/object-persistor/package.json
index cd9233dc47..ea6f314f50 100644
--- a/libraries/object-persistor/package.json
+++ b/libraries/object-persistor/package.json
@@ -36,7 +36,7 @@
     "chai-as-promised": "^7.1.1",
     "mocha": "^10.2.0",
     "mock-fs": "^5.2.0",
-    "mongodb": "6.7.0",
+    "mongodb": "6.10.0",
     "sandboxed-module": "^2.0.4",
     "sinon": "^9.2.4",
     "sinon-chai": "^3.7.0",
diff --git a/package-lock.json b/package-lock.json
index ff939a6c57..0664e6a3f3 100644
--- a/package-lock.json
+++ b/package-lock.json
@@ -243,8 +243,8 @@
       "version": "0.0.1",
       "license": "AGPL-3.0-only",
       "dependencies": {
-        "mongodb": "6.7.0",
-        "mongodb-legacy": "6.1.0"
+        "mongodb": "6.10.0",
+        "mongodb-legacy": "6.1.3"
       },
       "devDependencies": {
         "chai": "^4.3.6",
@@ -288,7 +288,7 @@
         "chai-as-promised": "^7.1.1",
         "mocha": "^10.2.0",
         "mock-fs": "^5.2.0",
-        "mongodb": "6.7.0",
+        "mongodb": "6.10.0",
         "sandboxed-module": "^2.0.4",
         "sinon": "^9.2.4",
         "sinon-chai": "^3.7.0",
@@ -27410,9 +27410,10 @@
       }
     },
     "node_modules/mongodb": {
-      "version": "6.7.0",
-      "resolved": "https://registry.npmjs.org/mongodb/-/mongodb-6.7.0.tgz",
-      "integrity": "sha512-TMKyHdtMcO0fYBNORiYdmM25ijsHs+Njs963r4Tro4OQZzqYigAzYQouwWRg4OIaiLRUEGUh/1UAcH5lxdSLIA==",
+      "version": "6.10.0",
+      "resolved": "https://registry.npmjs.org/mongodb/-/mongodb-6.10.0.tgz",
+      "integrity": "sha512-gP9vduuYWb9ZkDM546M+MP2qKVk5ZG2wPF63OvSRuUbqCR+11ZCAE1mOfllhlAG0wcoJY5yDL/rV3OmYEwXIzg==",
+      "license": "Apache-2.0",
       "dependencies": {
         "@mongodb-js/saslprep": "^1.1.5",
         "bson": "^6.7.0",
@@ -27487,9 +27488,10 @@
       }
     },
     "node_modules/mongodb-legacy": {
-      "version": "6.1.0",
-      "resolved": "https://registry.npmjs.org/mongodb-legacy/-/mongodb-legacy-6.1.0.tgz",
-      "integrity": "sha512-S/7HFTsCgbkFEM1hdA+uVRM1TBHR8+8RYVpjUnti9eyRQOdm+ecW6eUurjA2dh040nHEe5tMDxZNG5CReRKZhQ==",
+      "version": "6.1.3",
+      "resolved": "https://registry.npmjs.org/mongodb-legacy/-/mongodb-legacy-6.1.3.tgz",
+      "integrity": "sha512-XJ2PIbVEHUUF4/SyH00dfeprfeLOdWiHcKq8At+JoEZeTue+IAG39G2ixRwClnI7roPb/46K8IF713v9dgQ8rg==",
+      "license": "Apache-2.0",
       "dependencies": {
         "mongodb": "^6.0.0"
       },
@@ -27497,27 +27499,6 @@
         "node": ">=16.20.1"
       }
     },
-    "node_modules/mongoose": {
-      "version": "8.5.3",
-      "resolved": "https://registry.npmjs.org/mongoose/-/mongoose-8.5.3.tgz",
-      "integrity": "sha512-OubSDbsAclDFGHjV82MsKyIGQWFc42Ot1l+0dhRS6U9xODM7rm/ES/WpOQd8Ds9j0Mx8QzxZtrSCnBh6o9wUqw==",
-      "dependencies": {
-        "bson": "^6.7.0",
-        "kareem": "2.6.3",
-        "mongodb": "6.7.0",
-        "mpath": "0.9.0",
-        "mquery": "5.0.0",
-        "ms": "2.1.3",
-        "sift": "17.1.3"
-      },
-      "engines": {
-        "node": ">=16.20.1"
-      },
-      "funding": {
-        "type": "opencollective",
-        "url": "https://opencollective.com/mongoose"
-      }
-    },
     "node_modules/morgan": {
       "version": "1.10.0",
       "resolved": "https://registry.npmjs.org/morgan/-/morgan-1.10.0.tgz",
@@ -39116,7 +39097,7 @@
         "minimist": "^1.2.7",
         "mixpanel": "^0.13.0",
         "moment": "^2.29.4",
-        "mongodb": "6.7.0",
+        "mongodb": "6.10.0",
         "p-limit": "^2.3.0",
         "pg": "^8.7.1",
         "pg-copy-streams": "^2.2.2",
@@ -39166,7 +39147,7 @@
         "body-parser": "^1.20.3",
         "exegesis-express": "^4.0.0",
         "express": "^4.21.0",
-        "mongodb": "6.7.0"
+        "mongodb": "6.10.0"
       },
       "devDependencies": {
         "acorn": "^7.1.1",
@@ -39296,7 +39277,7 @@
         "body-parser": "^1.20.3",
         "bunyan": "^1.8.15",
         "express": "^4.21.0",
-        "mongodb": "6.7.0",
+        "mongodb": "6.10.0",
         "request": "~2.88.2",
         "underscore": "~1.13.1"
       },
@@ -39366,7 +39347,7 @@
         "celebrate": "^15.0.3",
         "express": "^4.21.0",
         "lodash": "^4.17.21",
-        "mongodb-legacy": "6.1.0",
+        "mongodb-legacy": "6.1.3",
         "p-map": "^4.0.0",
         "request": "^2.88.2"
       },
@@ -39439,7 +39420,7 @@
         "express": "^4.21.0",
         "lodash": "^4.17.21",
         "minimist": "^1.2.8",
-        "mongodb-legacy": "6.1.0",
+        "mongodb-legacy": "6.1.3",
         "request": "^2.88.2",
         "requestretry": "^7.1.0"
       },
@@ -39478,7 +39459,7 @@
         "chai": "^4.3.6",
         "chai-as-promised": "^7.1.1",
         "mocha": "^10.2.0",
-        "mongodb": "6.7.0",
+        "mongodb": "6.10.0",
         "sandboxed-module": "2.0.4",
         "sinon": "9.0.2",
         "sinon-chai": "^3.7.0",
@@ -39563,7 +39544,7 @@
         "bunyan": "^1.8.15",
         "express": "^4.21.0",
         "lodash": "^4.17.21",
-        "mongodb-legacy": "6.1.0",
+        "mongodb-legacy": "6.1.3",
         "octonode": "^0.9.5",
         "p-limit": "^2.2.0",
         "randomstring": "^1.1.5",
@@ -39626,7 +39607,7 @@
         "jsonwebtoken": "^9.0.0",
         "knex": "^2.4.0",
         "lodash": "^4.17.19",
-        "mongodb": "6.7.0",
+        "mongodb": "6.10.0",
         "overleaf-editor-core": "*",
         "pg": "^8.7.1",
         "pg-query-stream": "^4.2.4",
@@ -40663,7 +40644,7 @@
         "bunyan": "^1.8.15",
         "express": "^4.21.0",
         "method-override": "^3.0.0",
-        "mongodb-legacy": "6.1.0",
+        "mongodb-legacy": "6.1.3",
         "request": "^2.88.2"
       },
       "devDependencies": {
@@ -40695,7 +40676,7 @@
         "esmock": "^2.6.3",
         "express": "^4.21.0",
         "lodash": "^4.17.20",
-        "mongodb-legacy": "6.1.0",
+        "mongodb-legacy": "6.1.3",
         "overleaf-editor-core": "*",
         "request": "^2.88.2"
       },
@@ -40831,7 +40812,7 @@
         "chai-as-promised": "^7.1.1",
         "esmock": "^2.6.9",
         "mocha": "^10.2.0",
-        "mongodb": "6.7.0",
+        "mongodb": "6.10.0",
         "sinon": "^9.2.4",
         "typescript": "^5.0.4"
       }
@@ -41053,7 +41034,7 @@
         "lru-cache": "^4.1.5",
         "minimatch": "^7.4.2",
         "minimist": "^1.2.8",
-        "mongodb-legacy": "6.1.0",
+        "mongodb-legacy": "6.1.3",
         "node-fetch": "^2.7.0",
         "p-limit": "^2.3.0"
       },
@@ -41175,7 +41156,7 @@
         "express": "^4.21.0",
         "lodash": "^4.17.21",
         "lru-cache": "^5.1.1",
-        "mongodb-legacy": "6.1.0",
+        "mongodb-legacy": "6.1.3",
         "oauth": "0.9.15",
         "request": "^2.88.2",
         "simple-oauth2": "^5.0.0"
@@ -41325,8 +41306,8 @@
         "minimist": "^1.2.7",
         "mmmagic": "^0.5.3",
         "moment": "^2.29.4",
-        "mongodb-legacy": "6.1.0",
-        "mongoose": "8.5.3",
+        "mongodb-legacy": "6.1.3",
+        "mongoose": "8.8.3",
         "multer": "overleaf/multer#e1df247fbf8e7590520d20ae3601eaef9f3d2e9e",
         "nocache": "^2.1.0",
         "node-fetch": "^2.7.0",
@@ -43570,6 +43551,28 @@
         "node": ">=16 || 14 >=14.17"
       }
     },
+    "services/web/node_modules/mongoose": {
+      "version": "8.8.3",
+      "resolved": "https://registry.npmjs.org/mongoose/-/mongoose-8.8.3.tgz",
+      "integrity": "sha512-/I4n/DcXqXyIiLRfAmUIiTjj3vXfeISke8dt4U4Y8Wfm074Wa6sXnQrXN49NFOFf2mM1kUdOXryoBvkuCnr+Qw==",
+      "license": "MIT",
+      "dependencies": {
+        "bson": "^6.7.0",
+        "kareem": "2.6.3",
+        "mongodb": "~6.10.0",
+        "mpath": "0.9.0",
+        "mquery": "5.0.0",
+        "ms": "2.1.3",
+        "sift": "17.1.3"
+      },
+      "engines": {
+        "node": ">=16.20.1"
+      },
+      "funding": {
+        "type": "opencollective",
+        "url": "https://opencollective.com/mongoose"
+      }
+    },
     "services/web/node_modules/multer": {
       "version": "1.4.5-lts.1",
       "resolved": "git+ssh://git@github.com/overleaf/multer.git#e1df247fbf8e7590520d20ae3601eaef9f3d2e9e",
@@ -49688,7 +49691,7 @@
         "mixpanel": "^0.13.0",
         "mocha": "^10.2.0",
         "moment": "^2.29.4",
-        "mongodb": "6.7.0",
+        "mongodb": "6.10.0",
         "p-limit": "^2.3.0",
         "pg": "^8.7.1",
         "pg-copy-streams": "^2.2.2",
@@ -49729,7 +49732,7 @@
         "exegesis-express": "^4.0.0",
         "express": "^4.21.0",
         "mocha": "^10.2.0",
-        "mongodb": "6.7.0",
+        "mongodb": "6.10.0",
         "request": "^2.88.2",
         "sandboxed-module": "^2.0.4",
         "sinon": "^9.2.4",
@@ -49850,7 +49853,7 @@
         "esmock": "^2.6.3",
         "express": "^4.21.0",
         "mocha": "^10.2.0",
-        "mongodb": "6.7.0",
+        "mongodb": "6.10.0",
         "request": "~2.88.2",
         "sinon": "~9.0.1",
         "sinon-chai": "^3.7.0",
@@ -49910,7 +49913,7 @@
         "express": "^4.21.0",
         "lodash": "^4.17.21",
         "mocha": "^10.2.0",
-        "mongodb-legacy": "6.1.0",
+        "mongodb-legacy": "6.1.3",
         "p-map": "^4.0.0",
         "request": "^2.88.2",
         "sandboxed-module": "~2.0.4",
@@ -49973,7 +49976,7 @@
         "lodash": "^4.17.21",
         "minimist": "^1.2.8",
         "mocha": "^10.2.0",
-        "mongodb-legacy": "6.1.0",
+        "mongodb-legacy": "6.1.3",
         "request": "^2.88.2",
         "requestretry": "^7.1.0",
         "sandboxed-module": "^2.0.4",
@@ -50055,7 +50058,7 @@
         "glob": "^7.1.6",
         "lodash.once": "^4.1.1",
         "mocha": "^10.2.0",
-        "mongodb": "6.7.0",
+        "mongodb": "6.10.0",
         "node-fetch": "^2.7.0",
         "range-parser": "^1.2.1",
         "sandboxed-module": "2.0.4",
@@ -50119,7 +50122,7 @@
         "express": "^4.21.0",
         "lodash": "^4.17.21",
         "mocha": "^10.2.0",
-        "mongodb-legacy": "6.1.0",
+        "mongodb-legacy": "6.1.3",
         "octonode": "^0.9.5",
         "p-limit": "^2.2.0",
         "randomstring": "^1.1.5",
@@ -50202,8 +50205,8 @@
       "requires": {
         "chai": "^4.3.6",
         "mocha": "^10.2.0",
-        "mongodb": "6.7.0",
-        "mongodb-legacy": "6.1.0",
+        "mongodb": "6.10.0",
+        "mongodb-legacy": "6.1.3",
         "sandboxed-module": "^2.0.4",
         "sinon": "^9.2.4",
         "sinon-chai": "^3.7.0",
@@ -50224,7 +50227,7 @@
         "express": "^4.21.0",
         "method-override": "^3.0.0",
         "mocha": "^10.2.0",
-        "mongodb-legacy": "6.1.0",
+        "mongodb-legacy": "6.1.3",
         "request": "^2.88.2",
         "sandboxed-module": "^2.0.4",
         "sinon": "^9.2.4",
@@ -50256,7 +50259,7 @@
         "glob": "^7.1.6",
         "mocha": "^10.2.0",
         "mock-fs": "^5.2.0",
-        "mongodb": "6.7.0",
+        "mongodb": "6.10.0",
         "range-parser": "^1.2.1",
         "sandboxed-module": "^2.0.4",
         "sinon": "^9.2.4",
@@ -50320,7 +50323,7 @@
         "express": "^4.21.0",
         "lodash": "^4.17.20",
         "mocha": "^10.2.0",
-        "mongodb-legacy": "6.1.0",
+        "mongodb-legacy": "6.1.3",
         "nock": "^13.5.3",
         "overleaf-editor-core": "*",
         "request": "^2.88.2",
@@ -50504,7 +50507,7 @@
         "ioredis": "^4.16.1",
         "lodash": "^4.17.19",
         "mocha": "^10.2.0",
-        "mongodb": "6.7.0",
+        "mongodb": "6.10.0",
         "sinon": "^9.2.4",
         "typescript": "^5.0.4"
       },
@@ -50677,7 +50680,7 @@
         "minimatch": "^7.4.2",
         "minimist": "^1.2.8",
         "mocha": "^10.2.0",
-        "mongodb-legacy": "6.1.0",
+        "mongodb-legacy": "6.1.3",
         "node-fetch": "^2.7.0",
         "p-limit": "^2.3.0",
         "sandboxed-module": "^2.0.4",
@@ -50778,7 +50781,7 @@
         "lodash": "^4.17.21",
         "lru-cache": "^5.1.1",
         "mocha": "^10.2.0",
-        "mongodb-legacy": "6.1.0",
+        "mongodb-legacy": "6.1.3",
         "oauth": "0.9.15",
         "request": "^2.88.2",
         "simple-oauth2": "^5.0.0",
@@ -51061,8 +51064,8 @@
         "mocha-each": "^2.0.1",
         "mock-fs": "^5.1.2",
         "moment": "^2.29.4",
-        "mongodb-legacy": "6.1.0",
-        "mongoose": "8.5.3",
+        "mongodb-legacy": "6.1.3",
+        "mongoose": "8.8.3",
         "multer": "overleaf/multer#e1df247fbf8e7590520d20ae3601eaef9f3d2e9e",
         "nocache": "^2.1.0",
         "nock": "^13.5.6",
@@ -52586,6 +52589,20 @@
           "integrity": "sha512-qOOzS1cBTWYF4BH8fVePDBOO9iptMnGUEZwNc/cMWnTV2nVLZ7VoNWEPHkYczZA0pdoA7dl6e7FL659nX9S2aw==",
           "dev": true
         },
+        "mongoose": {
+          "version": "8.8.3",
+          "resolved": "https://registry.npmjs.org/mongoose/-/mongoose-8.8.3.tgz",
+          "integrity": "sha512-/I4n/DcXqXyIiLRfAmUIiTjj3vXfeISke8dt4U4Y8Wfm074Wa6sXnQrXN49NFOFf2mM1kUdOXryoBvkuCnr+Qw==",
+          "requires": {
+            "bson": "^6.7.0",
+            "kareem": "2.6.3",
+            "mongodb": "~6.10.0",
+            "mpath": "0.9.0",
+            "mquery": "5.0.0",
+            "ms": "2.1.3",
+            "sift": "17.1.3"
+          }
+        },
         "multer": {
           "version": "git+ssh://git@github.com/overleaf/multer.git#e1df247fbf8e7590520d20ae3601eaef9f3d2e9e",
           "integrity": "sha512-3fJSnWF3iBZJ6Z9y8AjFVY+O4DUKspxSnzXidb3zCKqBYyEKRrpGp7OXjT9th2gWPd+9u64ZyRWUf+YRYn1GCw==",
@@ -68222,9 +68239,9 @@
       }
     },
     "mongodb": {
-      "version": "6.7.0",
-      "resolved": "https://registry.npmjs.org/mongodb/-/mongodb-6.7.0.tgz",
-      "integrity": "sha512-TMKyHdtMcO0fYBNORiYdmM25ijsHs+Njs963r4Tro4OQZzqYigAzYQouwWRg4OIaiLRUEGUh/1UAcH5lxdSLIA==",
+      "version": "6.10.0",
+      "resolved": "https://registry.npmjs.org/mongodb/-/mongodb-6.10.0.tgz",
+      "integrity": "sha512-gP9vduuYWb9ZkDM546M+MP2qKVk5ZG2wPF63OvSRuUbqCR+11ZCAE1mOfllhlAG0wcoJY5yDL/rV3OmYEwXIzg==",
       "requires": {
         "@mongodb-js/saslprep": "^1.1.5",
         "bson": "^6.7.0",
@@ -68260,27 +68277,13 @@
       }
     },
     "mongodb-legacy": {
-      "version": "6.1.0",
-      "resolved": "https://registry.npmjs.org/mongodb-legacy/-/mongodb-legacy-6.1.0.tgz",
-      "integrity": "sha512-S/7HFTsCgbkFEM1hdA+uVRM1TBHR8+8RYVpjUnti9eyRQOdm+ecW6eUurjA2dh040nHEe5tMDxZNG5CReRKZhQ==",
+      "version": "6.1.3",
+      "resolved": "https://registry.npmjs.org/mongodb-legacy/-/mongodb-legacy-6.1.3.tgz",
+      "integrity": "sha512-XJ2PIbVEHUUF4/SyH00dfeprfeLOdWiHcKq8At+JoEZeTue+IAG39G2ixRwClnI7roPb/46K8IF713v9dgQ8rg==",
       "requires": {
         "mongodb": "^6.0.0"
       }
     },
-    "mongoose": {
-      "version": "8.5.3",
-      "resolved": "https://registry.npmjs.org/mongoose/-/mongoose-8.5.3.tgz",
-      "integrity": "sha512-OubSDbsAclDFGHjV82MsKyIGQWFc42Ot1l+0dhRS6U9xODM7rm/ES/WpOQd8Ds9j0Mx8QzxZtrSCnBh6o9wUqw==",
-      "requires": {
-        "bson": "^6.7.0",
-        "kareem": "2.6.3",
-        "mongodb": "6.7.0",
-        "mpath": "0.9.0",
-        "mquery": "5.0.0",
-        "ms": "2.1.3",
-        "sift": "17.1.3"
-      }
-    },
     "morgan": {
       "version": "1.10.0",
       "resolved": "https://registry.npmjs.org/morgan/-/morgan-1.10.0.tgz",
@@ -69132,7 +69135,7 @@
         "knex": "^2.4.0",
         "lodash": "^4.17.19",
         "mocha": "^10.2.0",
-        "mongodb": "6.7.0",
+        "mongodb": "6.10.0",
         "node-fetch": "^2.7.0",
         "overleaf-editor-core": "*",
         "pg": "^8.7.1",
diff --git a/services/chat/package.json b/services/chat/package.json
index 57d468920d..1540137434 100644
--- a/services/chat/package.json
+++ b/services/chat/package.json
@@ -25,7 +25,7 @@
     "body-parser": "^1.20.3",
     "exegesis-express": "^4.0.0",
     "express": "^4.21.0",
-    "mongodb": "6.7.0"
+    "mongodb": "6.10.0"
   },
   "devDependencies": {
     "acorn": "^7.1.1",
diff --git a/services/contacts/package.json b/services/contacts/package.json
index adbe99104d..5b30175c66 100644
--- a/services/contacts/package.json
+++ b/services/contacts/package.json
@@ -25,7 +25,7 @@
     "body-parser": "^1.20.3",
     "bunyan": "^1.8.15",
     "express": "^4.21.0",
-    "mongodb": "6.7.0",
+    "mongodb": "6.10.0",
     "request": "~2.88.2",
     "underscore": "~1.13.1"
   },
diff --git a/services/docstore/package.json b/services/docstore/package.json
index dee0ba2494..2e478ca840 100644
--- a/services/docstore/package.json
+++ b/services/docstore/package.json
@@ -30,7 +30,7 @@
     "celebrate": "^15.0.3",
     "express": "^4.21.0",
     "lodash": "^4.17.21",
-    "mongodb-legacy": "6.1.0",
+    "mongodb-legacy": "6.1.3",
     "p-map": "^4.0.0",
     "request": "^2.88.2"
   },
diff --git a/services/document-updater/package.json b/services/document-updater/package.json
index 5cb49c6de8..5759bdae22 100644
--- a/services/document-updater/package.json
+++ b/services/document-updater/package.json
@@ -33,7 +33,7 @@
     "express": "^4.21.0",
     "lodash": "^4.17.21",
     "minimist": "^1.2.8",
-    "mongodb-legacy": "6.1.0",
+    "mongodb-legacy": "6.1.3",
     "request": "^2.88.2",
     "requestretry": "^7.1.0"
   },
diff --git a/services/filestore/package.json b/services/filestore/package.json
index 050beecaf9..5eab300b4f 100644
--- a/services/filestore/package.json
+++ b/services/filestore/package.json
@@ -39,7 +39,7 @@
     "chai": "^4.3.6",
     "chai-as-promised": "^7.1.1",
     "mocha": "^10.2.0",
-    "mongodb": "6.7.0",
+    "mongodb": "6.10.0",
     "sandboxed-module": "2.0.4",
     "sinon": "9.0.2",
     "sinon-chai": "^3.7.0",
diff --git a/services/history-v1/package.json b/services/history-v1/package.json
index c5e4c9a8ba..a207ea4eb0 100644
--- a/services/history-v1/package.json
+++ b/services/history-v1/package.json
@@ -32,7 +32,7 @@
     "jsonwebtoken": "^9.0.0",
     "knex": "^2.4.0",
     "lodash": "^4.17.19",
-    "mongodb": "6.7.0",
+    "mongodb": "6.10.0",
     "overleaf-editor-core": "*",
     "pg": "^8.7.1",
     "pg-query-stream": "^4.2.4",
diff --git a/services/notifications/package.json b/services/notifications/package.json
index 08d50a0448..80e61b7269 100644
--- a/services/notifications/package.json
+++ b/services/notifications/package.json
@@ -27,7 +27,7 @@
     "bunyan": "^1.8.15",
     "express": "^4.21.0",
     "method-override": "^3.0.0",
-    "mongodb-legacy": "6.1.0",
+    "mongodb-legacy": "6.1.3",
     "request": "^2.88.2"
   },
   "devDependencies": {
diff --git a/services/project-history/package.json b/services/project-history/package.json
index 69f7b043c5..3be1e70f54 100644
--- a/services/project-history/package.json
+++ b/services/project-history/package.json
@@ -35,7 +35,7 @@
     "esmock": "^2.6.3",
     "express": "^4.21.0",
     "lodash": "^4.17.20",
-    "mongodb-legacy": "6.1.0",
+    "mongodb-legacy": "6.1.3",
     "overleaf-editor-core": "*",
     "request": "^2.88.2"
   },
diff --git a/services/web/package.json b/services/web/package.json
index 431c3cf837..7d265614da 100644
--- a/services/web/package.json
+++ b/services/web/package.json
@@ -134,8 +134,8 @@
     "minimist": "^1.2.7",
     "mmmagic": "^0.5.3",
     "moment": "^2.29.4",
-    "mongodb-legacy": "6.1.0",
-    "mongoose": "8.5.3",
+    "mongodb-legacy": "6.1.3",
+    "mongoose": "8.8.3",
     "multer": "overleaf/multer#e1df247fbf8e7590520d20ae3601eaef9f3d2e9e",
     "nocache": "^2.1.0",
     "node-fetch": "^2.7.0",