diff --git a/package.json b/package.json
index 77cb697..8ea1cd2 100644
--- a/package.json
+++ b/package.json
@@ -17,7 +17,7 @@
   "dependencies": {
     "@koa/cors": "^5.0.0",
     "@teamwork/websocket-json-stream": "^2.0.0",
-    "koa": "^3.0.1",
+    "koa": "^3.0.3",
     "koa-bodyparser": "^4.4.1",
     "koa-easy-ws": "^2.1.0",
     "sharedb": "^5.1.1",
diff --git a/yarn.lock b/yarn.lock
index ba7026c..c96618b 100644
--- a/yarn.lock
+++ b/yarn.lock
@@ -721,10 +721,10 @@ koa-easy-ws@^2.1.0:
   dependencies:
     debug "^4.1.1"
 
-koa@^3.0.1:
-  version "3.0.1"
-  resolved "https://registry.yarnpkg.com/koa/-/koa-3.0.1.tgz#b211a0f350d1cc6185047671f8ef7e019c16351d"
-  integrity sha512-oDxVkRwPOHhGlxKIDiDB2h+/l05QPtefD7nSqRgDfZt8P+QVYFWjfeK8jANf5O2YXjk8egd7KntvXKYx82wOag==
+koa@^3.0.3:
+  version "3.0.3"
+  resolved "https://registry.yarnpkg.com/koa/-/koa-3.0.3.tgz#40a97b6da0c0d49a704af82db2b3e5a618ed9042"
+  integrity sha512-MeuwbCoN1daWS32/Ni5qkzmrOtQO2qrnfdxDHjrm6s4b59yG4nexAJ0pTEFyzjLp0pBVO80CZp0vW8Ze30Ebow==
   dependencies:
     accepts "^1.3.8"
     content-disposition "~0.5.4"