diff --git a/packages/spelunker-web/package-lock.json b/packages/spelunker-web/package-lock.json
index 6c9cfa3..af9e5f5 100644
--- a/packages/spelunker-web/package-lock.json
+++ b/packages/spelunker-web/package-lock.json
@@ -13,7 +13,7 @@
         "@wowserhq/format": "^0.1.0",
         "classnames": "^2.3.1",
         "crypto-hash": "^2.0.0",
-        "graphql": "^15.7.2",
+        "graphql": "^16.8.1",
         "leaflet": "^1.9.4",
         "prop-types": "^15.7.2",
         "react": "^18.2.0",
@@ -6177,11 +6177,11 @@
       "dev": true
     },
     "node_modules/graphql": {
-      "version": "15.7.2",
-      "resolved": "https://registry.npmjs.org/graphql/-/graphql-15.7.2.tgz",
-      "integrity": "sha512-AnnKk7hFQFmU/2I9YSQf3xw44ctnSFCfp3zE0N6W174gqe9fWG/2rKaKxROK7CcI3XtERpjEKFqts8o319Kf7A==",
+      "version": "16.8.1",
+      "resolved": "https://registry.npmjs.org/graphql/-/graphql-16.8.1.tgz",
+      "integrity": "sha512-59LZHPdGZVh695Ud9lRzPBVTtlX9ZCV150Er2W43ro37wVof0ctenSaskPPjN7lVTIN8mSZt8PHUNKZuNQUuxw==",
       "engines": {
-        "node": ">= 10.x"
+        "node": "^12.22.0 || ^14.16.0 || ^16.0.0 || >=17.0.0"
       }
     },
     "node_modules/graphql-tag": {
@@ -15218,9 +15218,9 @@
       "dev": true
     },
     "graphql": {
-      "version": "15.7.2",
-      "resolved": "https://registry.npmjs.org/graphql/-/graphql-15.7.2.tgz",
-      "integrity": "sha512-AnnKk7hFQFmU/2I9YSQf3xw44ctnSFCfp3zE0N6W174gqe9fWG/2rKaKxROK7CcI3XtERpjEKFqts8o319Kf7A=="
+      "version": "16.8.1",
+      "resolved": "https://registry.npmjs.org/graphql/-/graphql-16.8.1.tgz",
+      "integrity": "sha512-59LZHPdGZVh695Ud9lRzPBVTtlX9ZCV150Er2W43ro37wVof0ctenSaskPPjN7lVTIN8mSZt8PHUNKZuNQUuxw=="
     },
     "graphql-tag": {
       "version": "2.12.6",
diff --git a/packages/spelunker-web/package.json b/packages/spelunker-web/package.json
index 44637eb..06548dd 100644
--- a/packages/spelunker-web/package.json
+++ b/packages/spelunker-web/package.json
@@ -22,7 +22,7 @@
     "@wowserhq/format": "^0.1.0",
     "classnames": "^2.3.1",
     "crypto-hash": "^2.0.0",
-    "graphql": "^15.7.2",
+    "graphql": "^16.8.1",
     "leaflet": "^1.9.4",
     "prop-types": "^15.7.2",
     "react": "^18.2.0",