fixes #4949

package.json

@@ -30,7 +30,7 @@
     "cron": "^1.0.5",
     "csurf": "^1.6.1",
     "daemon": "~1.1.0",
-    "express": "^4.9.5",
+    "express": "^4.14.0",
     "express-session": "^1.8.2",
     "express-useragent": "0.2.4",
     "html-to-text": "2.0.0",
@@ -74,7 +74,7 @@
     "semver": "^5.1.0",
     "serve-favicon": "^2.1.5",
     "sitemap": "^1.4.0",
-    "socket.io": "^1.4.0",
+    "socket.io": "^1.4.8",
     "socket.io-client": "^1.4.0",
     "socket.io-redis": "^1.0.0",
     "socketio-wildcard": "~0.3.0",