diff --git a/sandbox/package-lock.json b/sandbox/package-lock.json
index 0c4a38f9f..946055b33 100644
--- a/sandbox/package-lock.json
+++ b/sandbox/package-lock.json
@@ -9,7 +9,7 @@
       "version": "1.0.0",
       "license": "(MIT OR OGL)",
       "dependencies": {
-        "@hapi/hapi": "^21.4.0",
+        "@hapi/hapi": "^21.4.3",
         "@hapi/inert": "^7.1.0",
         "lodash": "^4.17.20"
       },
@@ -256,10 +256,9 @@
       "integrity": "sha512-w+lKW+yRrLhJu620jT3y+5g2mHqnKfepreykvdOcl9/6up8GrQQn+l3FRTsjHTKbkbfQFkuksHpdv2EcpKcJ4Q=="
     },
     "node_modules/@hapi/hapi": {
-      "version": "21.4.0",
-      "resolved": "https://registry.npmjs.org/@hapi/hapi/-/hapi-21.4.0.tgz",
-      "integrity": "sha512-kqiRWbYYLSSt2rYbxyNj8svPsXP715p4W/K3OXpXeiiVLNSdBX4f+zfmC+dY6eyb6rqTqTAbx6x8b5HpJTkviQ==",
-      "license": "BSD-3-Clause",
+      "version": "21.4.3",
+      "resolved": "https://registry.npmjs.org/@hapi/hapi/-/hapi-21.4.3.tgz",
+      "integrity": "sha512-Q7g0ZY4gxU69wabFKH75qR0AFOdiOECj6vGqTHBSO5Lrwe6TwD8r9LkYQIbvtG8N423VDpdVsiZP8MnBwmD6Hw==",
       "dependencies": {
         "@hapi/accept": "^6.0.3",
         "@hapi/ammo": "^6.0.1",
@@ -269,13 +268,13 @@
         "@hapi/catbox": "^12.1.1",
         "@hapi/catbox-memory": "^6.0.2",
         "@hapi/heavy": "^8.0.1",
-        "@hapi/hoek": "^11.0.6",
+        "@hapi/hoek": "^11.0.7",
         "@hapi/mimos": "^7.0.1",
-        "@hapi/podium": "^5.0.1",
-        "@hapi/shot": "^6.0.1",
+        "@hapi/podium": "^5.0.2",
+        "@hapi/shot": "^6.0.2",
         "@hapi/somever": "^4.1.1",
         "@hapi/statehood": "^8.2.0",
-        "@hapi/subtext": "^8.1.0",
+        "@hapi/subtext": "^8.1.1",
         "@hapi/teamwork": "^6.0.0",
         "@hapi/topo": "^6.0.2",
         "@hapi/validate": "^2.0.1"
@@ -376,9 +375,9 @@
       }
     },
     "node_modules/@hapi/shot": {
-      "version": "6.0.1",
-      "resolved": "https://registry.npmjs.org/@hapi/shot/-/shot-6.0.1.tgz",
-      "integrity": "sha512-s5ynMKZXYoDd3dqPw5YTvOR/vjHvMTxc388+0qL0jZZP1+uwXuUD32o9DuuuLsmTlyXCWi02BJl1pBpwRuUrNA==",
+      "version": "6.0.2",
+      "resolved": "https://registry.npmjs.org/@hapi/shot/-/shot-6.0.2.tgz",
+      "integrity": "sha512-WKK1ShfJTrL1oXC0skoIZQYzvLsyMDEF8lfcWuQBjpjCN29qivr9U36ld1z0nt6edvzv28etNMOqUF4klnHryw==",
       "dependencies": {
         "@hapi/hoek": "^11.0.2",
         "@hapi/validate": "^2.0.1"
@@ -409,9 +408,9 @@
       }
     },
     "node_modules/@hapi/subtext": {
-      "version": "8.1.0",
-      "resolved": "https://registry.npmjs.org/@hapi/subtext/-/subtext-8.1.0.tgz",
-      "integrity": "sha512-PyaN4oSMtqPjjVxLny1k0iYg4+fwGusIhaom9B2StinBclHs7v46mIW706Y+Wo21lcgulGyXbQrmT/w4dus6ww==",
+      "version": "8.1.1",
+      "resolved": "https://registry.npmjs.org/@hapi/subtext/-/subtext-8.1.1.tgz",
+      "integrity": "sha512-ex1Y2s/KuJktS8Ww0k6XJ5ysSKrzNym4i5pDVuCwlSgHHviHUsT1JNzE6FYhNU9TTHSNdyfue/t2m89bpkX9Jw==",
       "dependencies": {
         "@hapi/boom": "^10.0.1",
         "@hapi/bourne": "^3.0.0",
@@ -1585,9 +1584,9 @@
       "integrity": "sha512-w+lKW+yRrLhJu620jT3y+5g2mHqnKfepreykvdOcl9/6up8GrQQn+l3FRTsjHTKbkbfQFkuksHpdv2EcpKcJ4Q=="
     },
     "@hapi/hapi": {
-      "version": "21.4.0",
-      "resolved": "https://registry.npmjs.org/@hapi/hapi/-/hapi-21.4.0.tgz",
-      "integrity": "sha512-kqiRWbYYLSSt2rYbxyNj8svPsXP715p4W/K3OXpXeiiVLNSdBX4f+zfmC+dY6eyb6rqTqTAbx6x8b5HpJTkviQ==",
+      "version": "21.4.3",
+      "resolved": "https://registry.npmjs.org/@hapi/hapi/-/hapi-21.4.3.tgz",
+      "integrity": "sha512-Q7g0ZY4gxU69wabFKH75qR0AFOdiOECj6vGqTHBSO5Lrwe6TwD8r9LkYQIbvtG8N423VDpdVsiZP8MnBwmD6Hw==",
       "requires": {
         "@hapi/accept": "^6.0.3",
         "@hapi/ammo": "^6.0.1",
@@ -1597,13 +1596,13 @@
         "@hapi/catbox": "^12.1.1",
         "@hapi/catbox-memory": "^6.0.2",
         "@hapi/heavy": "^8.0.1",
-        "@hapi/hoek": "^11.0.6",
+        "@hapi/hoek": "^11.0.7",
         "@hapi/mimos": "^7.0.1",
-        "@hapi/podium": "^5.0.1",
-        "@hapi/shot": "^6.0.1",
+        "@hapi/podium": "^5.0.2",
+        "@hapi/shot": "^6.0.2",
         "@hapi/somever": "^4.1.1",
         "@hapi/statehood": "^8.2.0",
-        "@hapi/subtext": "^8.1.0",
+        "@hapi/subtext": "^8.1.1",
         "@hapi/teamwork": "^6.0.0",
         "@hapi/topo": "^6.0.2",
         "@hapi/validate": "^2.0.1"
@@ -1697,9 +1696,9 @@
       }
     },
     "@hapi/shot": {
-      "version": "6.0.1",
-      "resolved": "https://registry.npmjs.org/@hapi/shot/-/shot-6.0.1.tgz",
-      "integrity": "sha512-s5ynMKZXYoDd3dqPw5YTvOR/vjHvMTxc388+0qL0jZZP1+uwXuUD32o9DuuuLsmTlyXCWi02BJl1pBpwRuUrNA==",
+      "version": "6.0.2",
+      "resolved": "https://registry.npmjs.org/@hapi/shot/-/shot-6.0.2.tgz",
+      "integrity": "sha512-WKK1ShfJTrL1oXC0skoIZQYzvLsyMDEF8lfcWuQBjpjCN29qivr9U36ld1z0nt6edvzv28etNMOqUF4klnHryw==",
       "requires": {
         "@hapi/hoek": "^11.0.2",
         "@hapi/validate": "^2.0.1"
@@ -1729,9 +1728,9 @@
       }
     },
     "@hapi/subtext": {
-      "version": "8.1.0",
-      "resolved": "https://registry.npmjs.org/@hapi/subtext/-/subtext-8.1.0.tgz",
-      "integrity": "sha512-PyaN4oSMtqPjjVxLny1k0iYg4+fwGusIhaom9B2StinBclHs7v46mIW706Y+Wo21lcgulGyXbQrmT/w4dus6ww==",
+      "version": "8.1.1",
+      "resolved": "https://registry.npmjs.org/@hapi/subtext/-/subtext-8.1.1.tgz",
+      "integrity": "sha512-ex1Y2s/KuJktS8Ww0k6XJ5ysSKrzNym4i5pDVuCwlSgHHviHUsT1JNzE6FYhNU9TTHSNdyfue/t2m89bpkX9Jw==",
       "requires": {
         "@hapi/boom": "^10.0.1",
         "@hapi/bourne": "^3.0.0",
diff --git a/sandbox/package.json b/sandbox/package.json
index b5dd5a624..50c651733 100644
--- a/sandbox/package.json
+++ b/sandbox/package.json
@@ -12,7 +12,7 @@
   "homepage": "https://github.com/NHSDigital/hello-world-api",
   "main": "app.js",
   "dependencies": {
-    "@hapi/hapi": "^21.4.0",
+    "@hapi/hapi": "^21.4.3",
     "@hapi/inert": "^7.1.0",
     "lodash": "^4.17.20"
   },