diff --git a/packages/fxa-admin-server/package.json b/packages/fxa-admin-server/package.json
index e7fe27be014..17280545653 100644
--- a/packages/fxa-admin-server/package.json
+++ b/packages/fxa-admin-server/package.json
@@ -39,7 +39,7 @@
     "@sentry/integrations": "^5.29.1",
     "@sentry/node": "^6.0.1",
     "apollo-server": "^2.19.2",
-    "apollo-server-express": "^2.21.0",
+    "apollo-server-express": "^2.21.1",
     "class-transformer": "^0.4.0",
     "class-validator": "^0.12.2",
     "convict": "^6.0.0",
diff --git a/packages/fxa-graphql-api/package.json b/packages/fxa-graphql-api/package.json
index 5847563e3be..c1c9decc304 100644
--- a/packages/fxa-graphql-api/package.json
+++ b/packages/fxa-graphql-api/package.json
@@ -41,7 +41,7 @@
     "@sentry/node": "^6.0.1",
     "apollo-datasource": "^0.7.2",
     "apollo-server": "^2.19.2",
-    "apollo-server-express": "^2.21.0",
+    "apollo-server-express": "^2.21.1",
     "class-transformer": "^0.4.0",
     "class-validator": "^0.12.2",
     "commander": "^6.0.0",
diff --git a/yarn.lock b/yarn.lock
index c3a3ae6db54..9cf1599d095 100644
--- a/yarn.lock
+++ b/yarn.lock
@@ -234,6 +234,15 @@ __metadata:
   languageName: node
   linkType: hard
 
+"@apollographql/graphql-playground-html@npm:1.6.27":
+  version: 1.6.27
+  resolution: "@apollographql/graphql-playground-html@npm:1.6.27"
+  dependencies:
+    xss: ^1.0.8
+  checksum: 80a63817770dcea1a104aecf71305bbb8adbce23d4c67e74bc2c7f69a43cfef02bab339c4d2399f217984bc38a3b8a1150593ba32e7a57c239a2c41feb8f673d
+  languageName: node
+  linkType: hard
+
 "@apollographql/graphql-upload-8-fork@npm:^8.1.3":
   version: 8.1.3
   resolution: "@apollographql/graphql-upload-8-fork@npm:8.1.3"
@@ -9285,6 +9294,41 @@ __metadata:
   languageName: node
   linkType: hard
 
+"apollo-server-core@npm:^2.21.1":
+  version: 2.21.1
+  resolution: "apollo-server-core@npm:2.21.1"
+  dependencies:
+    "@apollographql/apollo-tools": ^0.4.3
+    "@apollographql/graphql-playground-html": 1.6.27
+    "@apollographql/graphql-upload-8-fork": ^8.1.3
+    "@types/ws": ^7.0.0
+    apollo-cache-control: ^0.11.6
+    apollo-datasource: ^0.7.3
+    apollo-graphql: ^0.6.0
+    apollo-reporting-protobuf: ^0.6.2
+    apollo-server-caching: ^0.5.3
+    apollo-server-env: ^3.0.0
+    apollo-server-errors: ^2.4.2
+    apollo-server-plugin-base: ^0.10.4
+    apollo-server-types: ^0.6.3
+    apollo-tracing: ^0.12.2
+    async-retry: ^1.2.1
+    fast-json-stable-stringify: ^2.0.0
+    graphql-extensions: ^0.12.8
+    graphql-tag: ^2.11.0
+    graphql-tools: ^4.0.8
+    loglevel: ^1.6.7
+    lru-cache: ^6.0.0
+    sha.js: ^2.4.11
+    subscriptions-transport-ws: ^0.9.11
+    uuid: ^8.0.0
+    ws: ^6.0.0
+  peerDependencies:
+    graphql: ^0.12.0 || ^0.13.0 || ^14.0.0 || ^15.0.0
+  checksum: 44e62ee0d42421416378abdb97092ea4d106394d381f98677d5df03fcd33ed61beb053fc5a4c3c5b4c47ab300b74834fdccae3c0ce45429a853b634abe373d62
+  languageName: node
+  linkType: hard
+
 "apollo-server-env@npm:^2.4.5":
   version: 2.4.5
   resolution: "apollo-server-env@npm:2.4.5"
@@ -9314,7 +9358,7 @@ __metadata:
   languageName: node
   linkType: hard
 
-"apollo-server-express@npm:^2.19.2, apollo-server-express@npm:^2.21.0":
+"apollo-server-express@npm:^2.19.2":
   version: 2.21.0
   resolution: "apollo-server-express@npm:2.21.0"
   dependencies:
@@ -9341,6 +9385,33 @@ __metadata:
   languageName: node
   linkType: hard
 
+"apollo-server-express@npm:^2.21.1":
+  version: 2.21.1
+  resolution: "apollo-server-express@npm:2.21.1"
+  dependencies:
+    "@apollographql/graphql-playground-html": 1.6.27
+    "@types/accepts": ^1.3.5
+    "@types/body-parser": 1.19.0
+    "@types/cors": 2.8.8
+    "@types/express": 4.17.7
+    "@types/express-serve-static-core": 4.17.18
+    accepts: ^1.3.5
+    apollo-server-core: ^2.21.1
+    apollo-server-types: ^0.6.3
+    body-parser: ^1.18.3
+    cors: ^2.8.4
+    express: ^4.17.1
+    graphql-subscriptions: ^1.0.0
+    graphql-tools: ^4.0.8
+    parseurl: ^1.3.2
+    subscriptions-transport-ws: ^0.9.16
+    type-is: ^1.6.16
+  peerDependencies:
+    graphql: ^0.12.0 || ^0.13.0 || ^14.0.0 || ^15.0.0
+  checksum: 40807b034e8f09592fcf9591baa19c0cafa2c7fa4b6d63686f152a9a6827a6c49e0206a3fc8624e32b4efb0655ffbb66ca3122d6e592a5d2960d09a20dd75f4c
+  languageName: node
+  linkType: hard
+
 "apollo-server-plugin-base@npm:^0.10.4":
   version: 0.10.4
   resolution: "apollo-server-plugin-base@npm:0.10.4"
@@ -18813,7 +18884,7 @@ fsevents@^1.2.7:
     "@types/supertest": ^2.0.10
     "@types/yargs": ^15.0.5
     apollo-server: ^2.19.2
-    apollo-server-express: ^2.21.0
+    apollo-server-express: ^2.21.1
     audit-filter: ^0.5.0
     chai: ^4.2.0
     chance: ^1.1.6
@@ -19404,7 +19475,7 @@ fsevents@^1.2.7:
     "@types/yargs": ^15.0.5
     apollo-datasource: ^0.7.2
     apollo-server: ^2.19.2
-    apollo-server-express: ^2.21.0
+    apollo-server-express: ^2.21.1
     audit-filter: ^0.5.0
     chance: ^1.1.6
     class-transformer: ^0.4.0
@@ -40079,7 +40150,7 @@ typescript@~4.1.2:
   languageName: node
   linkType: hard
 
-"xss@npm:^1.0.6":
+"xss@npm:^1.0.6, xss@npm:^1.0.8":
   version: 1.0.8
   resolution: "xss@npm:1.0.8"
   dependencies: