diff --git a/package.json b/package.json
index 6b2256e..d08614c 100644
--- a/package.json
+++ b/package.json
@@ -22,7 +22,7 @@
     "@graphile-contrib/pg-simplify-inflector": "6.1.0",
     "@koa/router": "14.0.0",
     "dotenv": "17.2.3",
-    "koa": "3.0.2",
+    "koa": "3.0.3",
     "koa-bodyparser": "4.4.1",
     "koa-compress": "5.1.1",
     "koa-helmet": "8.0.1",
diff --git a/pnpm-lock.yaml b/pnpm-lock.yaml
index 167840f..90a9883 100644
--- a/pnpm-lock.yaml
+++ b/pnpm-lock.yaml
@@ -18,8 +18,8 @@ importers:
         specifier: 17.2.3
         version: 17.2.3
       koa:
-        specifier: 3.0.2
-        version: 3.0.2
+        specifier: 3.0.3
+        version: 3.0.3
       koa-bodyparser:
         specifier: 4.4.1
         version: 4.4.1
@@ -1886,8 +1886,8 @@ packages:
   koa-is-json@1.0.0:
     resolution: {integrity: sha512-+97CtHAlWDx0ndt0J8y3P12EWLwTLMXIfMnYDev3wOTwH/RpBGMlfn4bDXlMEg1u73K6XRE9BbUp+5ZAYoRYWw==}
 
-  koa@3.0.2:
-    resolution: {integrity: sha512-dlbFxTswxHFKSkPOlt1Qt7v1WumZ7ENY5r0W77YkSMyOltQL14gbLwtZswErISGQp5D/VBXFHyFYY/17Wppj7g==}
+  koa@3.0.3:
+    resolution: {integrity: sha512-MeuwbCoN1daWS32/Ni5qkzmrOtQO2qrnfdxDHjrm6s4b59yG4nexAJ0pTEFyzjLp0pBVO80CZp0vW8Ze30Ebow==}
     engines: {node: '>= 18'}
 
   lazystream@1.0.1:
@@ -5170,7 +5170,7 @@ snapshots:
 
   koa-is-json@1.0.0: {}
 
-  koa@3.0.2:
+  koa@3.0.3:
     dependencies:
       accepts: 1.3.8
       content-disposition: 0.5.4