diff --git a/.changeset/afraid-bears-fry.md b/.changeset/afraid-bears-fry.md
new file mode 100644
index 00000000000..cdfd8f42d10
--- /dev/null
+++ b/.changeset/afraid-bears-fry.md
@@ -0,0 +1,7 @@
+---
+"@remix-run/dev": patch
+"@remix-run/express": patch
+"@remix-run/serve": patch
+---
+
+Upgrade `express` dependency to `^4.19.2`
\ No newline at end of file
diff --git a/integration/helpers/node-template/package.json b/integration/helpers/node-template/package.json
index 6365ed8a99d..57b73e3c4c4 100644
--- a/integration/helpers/node-template/package.json
+++ b/integration/helpers/node-template/package.json
@@ -16,7 +16,7 @@
     "@remix-run/react": "workspace:*",
     "@remix-run/serve": "workspace:*",
     "@remix-run/server-runtime": "workspace:*",
-    "express": "^4.17.1",
+    "express": "^4.19.2",
     "isbot": "^4.1.0",
     "react": "^18.2.0",
     "react-dom": "^18.2.0"
diff --git a/integration/helpers/vite-template/package.json b/integration/helpers/vite-template/package.json
index 2b8589256df..325bde7d5d5 100644
--- a/integration/helpers/vite-template/package.json
+++ b/integration/helpers/vite-template/package.json
@@ -17,7 +17,7 @@
     "@remix-run/serve": "workspace:*",
     "@vanilla-extract/css": "^1.10.0",
     "@vanilla-extract/vite-plugin": "^3.9.2",
-    "express": "^4.17.1",
+    "express": "^4.19.2",
     "isbot": "^4.1.0",
     "react": "^18.2.0",
     "react-dom": "^18.2.0",
diff --git a/integration/package.json b/integration/package.json
index f3b75892825..f145023a534 100644
--- a/integration/package.json
+++ b/integration/package.json
@@ -23,7 +23,7 @@
     "cross-spawn": "^7.0.3",
     "dedent": "^0.7.0",
     "execa": "^5.1.1",
-    "express": "^4.17.1",
+    "express": "^4.19.2",
     "fs-extra": "^10.0.0",
     "get-port": "^5.1.1",
     "glob": "8.0.3",
diff --git a/packages/remix-dev/package.json b/packages/remix-dev/package.json
index 2b990a5a524..055dd435895 100644
--- a/packages/remix-dev/package.json
+++ b/packages/remix-dev/package.json
@@ -47,7 +47,7 @@
     "esbuild-plugins-node-modules-polyfill": "^1.6.0",
     "execa": "5.1.1",
     "exit-hook": "2.2.1",
-    "express": "^4.17.1",
+    "express": "^4.19.2",
     "fs-extra": "^10.0.0",
     "get-port": "^5.1.1",
     "gunzip-maybe": "^1.4.2",
diff --git a/packages/remix-express/package.json b/packages/remix-express/package.json
index 8a8b7125860..99deafd7c97 100644
--- a/packages/remix-express/package.json
+++ b/packages/remix-express/package.json
@@ -23,13 +23,13 @@
     "@types/express": "^4.17.9",
     "@types/node": "^18.17.1",
     "@types/supertest": "^2.0.10",
-    "express": "^4.17.1",
+    "express": "^4.19.2",
     "node-mocks-http": "^1.10.1",
     "supertest": "^6.3.3",
     "typescript": "^5.1.6"
   },
   "peerDependencies": {
-    "express": "^4.17.1",
+    "express": "^4.19.2",
     "typescript": "^5.1.0"
   },
   "peerDependenciesMeta": {
diff --git a/packages/remix-serve/package.json b/packages/remix-serve/package.json
index eb0f6552880..2f8cea79cc4 100644
--- a/packages/remix-serve/package.json
+++ b/packages/remix-serve/package.json
@@ -22,7 +22,7 @@
     "@remix-run/node": "workspace:*",
     "chokidar": "^3.5.3",
     "compression": "^1.7.4",
-    "express": "^4.17.1",
+    "express": "^4.19.2",
     "get-port": "5.1.1",
     "morgan": "^1.10.0",
     "source-map-support": "^0.5.21"
diff --git a/pnpm-lock.yaml b/pnpm-lock.yaml
index e8c2871b64e..26c55c0739a 100644
--- a/pnpm-lock.yaml
+++ b/pnpm-lock.yaml
@@ -350,8 +350,8 @@ importers:
         specifier: ^5.1.1
         version: 5.1.1
       express:
-        specifier: ^4.17.1
-        version: 4.18.2
+        specifier: ^4.19.2
+        version: 4.19.2
       fs-extra:
         specifier: ^10.0.0
         version: 10.1.0
@@ -505,8 +505,8 @@ importers:
         specifier: workspace:*
         version: link:../../../packages/remix-server-runtime
       express:
-        specifier: ^4.17.1
-        version: 4.18.2
+        specifier: ^4.19.2
+        version: 4.19.2
       isbot:
         specifier: ^4.1.0
         version: 4.4.0
@@ -618,8 +618,8 @@ importers:
         specifier: ^3.9.2
         version: 3.9.5(vite@5.1.0)
       express:
-        specifier: ^4.17.1
-        version: 4.18.2
+        specifier: ^4.19.2
+        version: 4.19.2
       isbot:
         specifier: ^4.1.0
         version: 4.4.0
@@ -916,8 +916,8 @@ importers:
         specifier: 2.2.1
         version: 2.2.1
       express:
-        specifier: ^4.17.1
-        version: 4.18.2
+        specifier: ^4.19.2
+        version: 4.19.2
       fs-extra:
         specifier: ^10.0.0
         version: 10.1.0
@@ -1168,8 +1168,8 @@ importers:
         specifier: ^2.0.10
         version: 2.0.16
       express:
-        specifier: ^4.17.1
-        version: 4.18.2
+        specifier: ^4.19.2
+        version: 4.19.2
       node-mocks-http:
         specifier: ^1.10.1
         version: 1.14.1
@@ -1275,8 +1275,8 @@ importers:
         specifier: ^1.7.4
         version: 1.7.4
       express:
-        specifier: ^4.17.1
-        version: 4.18.2
+        specifier: ^4.19.2
+        version: 4.19.2
       get-port:
         specifier: 5.1.1
         version: 5.1.1
@@ -6066,8 +6066,8 @@ packages:
     resolution: {integrity: sha512-XpNj6GDQzdfW+r2Wnn7xiSAd7TM3jzkxGXBGTtWKuSXv1xUV+azxAm8jdWZN06QTQk+2N2XB9jRDkvbmQmcRtg==}
     dev: false
 
-  /body-parser@1.20.1:
-    resolution: {integrity: sha512-jWi7abTbYwajOytWCQc37VulmWiRae5RyTpaCyDcS5/lMdtwSz5lOpDE67srw/HYe35f1z3fDQw+3txg7gNtWw==}
+  /body-parser@1.20.2:
+    resolution: {integrity: sha512-ml9pReCu3M61kGlqoTm2umSXTlRTuGTx0bfYj+uIUKKYycG5NtSbeetV3faSU6R7ajOPw0g/J1PvK4qNy7s5bA==}
     engines: {node: '>= 0.8', npm: 1.2.8000 || >= 1.4.16}
     dependencies:
       bytes: 3.1.2
@@ -6079,7 +6079,7 @@ packages:
       iconv-lite: 0.4.24
       on-finished: 2.4.1
       qs: 6.11.0
-      raw-body: 2.5.1
+      raw-body: 2.5.2
       type-is: 1.6.18
       unpipe: 1.0.0
     transitivePeerDependencies:
@@ -6621,7 +6621,6 @@ packages:
   /cookie@0.6.0:
     resolution: {integrity: sha512-U71cyTamuh1CRNCfpGY6to28lxvNwPG4Guz/EVjgf3Jmzv0vlDp1atT9eS5dDjMYHucpHbWns6Lwf3BKz6svdw==}
     engines: {node: '>= 0.6'}
-    dev: false
 
   /cookiejar@2.1.4:
     resolution: {integrity: sha512-LDx6oHrK+PhzLKJU9j5S7/Y3jM/mUHvD/DeI1WQmJn652iPC5Y4TBzC9l+5OMOXlyTTA+SmVUPm0HQUwpD5Jqw==}
@@ -8050,16 +8049,16 @@ packages:
       jest-message-util: 29.7.0
       jest-util: 29.7.0
 
-  /express@4.18.2:
-    resolution: {integrity: sha512-5/PsL6iGPdfQ/lKM1UuielYgv3BUoJfz1aUwU9vHZ+J7gyvwdQXFEBIEIaxeGf0GIcreATNyBExtalisDbuMqQ==}
+  /express@4.19.2:
+    resolution: {integrity: sha512-5T6nhjsT+EOMzuck8JjBHARTHfMht0POzlA60WV2pMD3gyXw2LZnZ+ueGdNxG+0calOJcWKbpFcuzLZ91YWq9Q==}
     engines: {node: '>= 0.10.0'}
     dependencies:
       accepts: 1.3.8
       array-flatten: 1.1.1
-      body-parser: 1.20.1
+      body-parser: 1.20.2
       content-disposition: 0.5.4
       content-type: 1.0.5
-      cookie: 0.5.0
+      cookie: 0.6.0
       cookie-signature: 1.0.6
       debug: 2.6.9
       depd: 2.0.0
@@ -12783,8 +12782,8 @@ packages:
     resolution: {integrity: sha512-Hrgsx+orqoygnmhFbKaHE6c296J+HTAQXoxEF6gNupROmmGJRoyzfG3ccAveqCBrwr/2yxQ5BVd/GTl5agOwSg==}
     engines: {node: '>= 0.6'}
 
-  /raw-body@2.5.1:
-    resolution: {integrity: sha512-qqJBtEyVgS0ZmPGdCFPWJ3FreoqvG4MVQln/kCgF7Olq95IbOp0/BWyMwbdtn4VTvkM8Y7khCQ2Xgk/tcrCXig==}
+  /raw-body@2.5.2:
+    resolution: {integrity: sha512-8zGqypfENjCIqGhgXToC8aB2r7YrBX+AQAfIPs/Mlk+BtPTztOvTS01NRW/3Eh60J+a48lt8qsCzirQ6loCVfA==}
     engines: {node: '>= 0.8'}
     dependencies:
       bytes: 3.1.2
diff --git a/scripts/playground/template/package.json b/scripts/playground/template/package.json
index 6bc8cc88c87..b9882d3961c 100644
--- a/scripts/playground/template/package.json
+++ b/scripts/playground/template/package.json
@@ -24,7 +24,7 @@
     "@remix-run/serve": "*",
     "@remix-run/server-runtime": "*",
     "bcryptjs": "^2.4.3",
-    "express": "^4.18.1",
+    "express": "^4.19.2",
     "get-port": "^6.1.2",
     "isbot": "^4.1.0",
     "morgan": "^1.10.0",
diff --git a/templates/classic-remix-compiler/express/package.json b/templates/classic-remix-compiler/express/package.json
index a619d61844b..40759d6b060 100644
--- a/templates/classic-remix-compiler/express/package.json
+++ b/templates/classic-remix-compiler/express/package.json
@@ -16,7 +16,7 @@
     "@remix-run/react": "*",
     "compression": "^1.7.4",
     "cross-env": "^7.0.3",
-    "express": "^4.18.2",
+    "express": "^4.19.2",
     "isbot": "^4.1.0",
     "morgan": "^1.10.0",
     "react": "^18.2.0",
diff --git a/templates/express/package.json b/templates/express/package.json
index a6905c117b6..d4aa019a3b9 100644
--- a/templates/express/package.json
+++ b/templates/express/package.json
@@ -14,7 +14,8 @@
     "@remix-run/node": "*",
     "@remix-run/react": "*",
     "compression": "^1.7.4",
-    "express": "^4.18.2",
+    "cross-env": "^7.0.3",
+    "express": "^4.19.2",
     "isbot": "^4.1.0",
     "morgan": "^1.10.0",
     "react": "^18.2.0",
@@ -29,7 +30,6 @@
     "@types/react-dom": "^18.2.7",
     "@typescript-eslint/eslint-plugin": "^6.7.4",
     "@typescript-eslint/parser": "^6.7.4",
-    "cross-env": "^7.0.3",
     "eslint": "^8.38.0",
     "eslint-import-resolver-typescript": "^3.6.1",
     "eslint-plugin-import": "^2.28.1",