diff --git a/package.json b/package.json
index 7384b425..da337178 100644
--- a/package.json
+++ b/package.json
@@ -68,7 +68,7 @@
     "ts-node": "10.9.1"
   },
   "dependencies": {
-    "koa": "2.16.2",
+    "koa": "2.16.4",
     "koa-body": "6.0.1",
     "koa-mount": "4.0.0",
     "koa-router": "12.0.0",
diff --git a/packages/oats-koa-adapter/package.json b/packages/oats-koa-adapter/package.json
index aa5098d9..908a5e3f 100644
--- a/packages/oats-koa-adapter/package.json
+++ b/packages/oats-koa-adapter/package.json
@@ -42,7 +42,7 @@
     "@types/koa-router": "7.4.4",
     "@types/lodash": "4.14.195",
     "@types/node": "18.16.18",
-    "koa": "2.16.2",
+    "koa": "2.16.4",
     "koa-body": "6.0.1",
     "koa-router": "12.0.0",
     "ts-node": "10.9.1",
diff --git a/packages/oats/package.json b/packages/oats/package.json
index d21b04bc..10e1c97b 100644
--- a/packages/oats/package.json
+++ b/packages/oats/package.json
@@ -55,7 +55,7 @@
     "form-data": "4.0.4",
     "jest": "29.5.0",
     "jsverify": "0.8.4",
-    "koa": "2.16.2",
+    "koa": "2.16.4",
     "koa-body": "6.0.1",
     "koa-mount": "4.0.0",
     "koa-router": "12.0.0",
diff --git a/pnpm-lock.yaml b/pnpm-lock.yaml
index 7d30f4f2..2b3d2475 100644
--- a/pnpm-lock.yaml
+++ b/pnpm-lock.yaml
@@ -9,8 +9,8 @@ importers:
   .:
     dependencies:
       koa:
-        specifier: 2.16.2
-        version: 2.16.2
+        specifier: 2.16.4
+        version: 2.16.4
       koa-body:
         specifier: 6.0.1
         version: 6.0.1
@@ -155,8 +155,8 @@ importers:
         specifier: 0.8.4
         version: 0.8.4
       koa:
-        specifier: 2.16.2
-        version: 2.16.2
+        specifier: 2.16.4
+        version: 2.16.4
       koa-body:
         specifier: 6.0.1
         version: 6.0.1
@@ -308,8 +308,8 @@ importers:
         specifier: 18.16.18
         version: 18.16.18
       koa:
-        specifier: 2.16.2
-        version: 2.16.2
+        specifier: 2.16.4
+        version: 2.16.4
       koa-body:
         specifier: 6.0.1
         version: 6.0.1
@@ -2216,8 +2216,8 @@ packages:
     engines: {node: '>= 12'}
     deprecated: 'Please use @koa/router instead, starting from v9! '
 
-  koa@2.16.2:
-    resolution: {integrity: sha512-+CCssgnrWKx9aI3OeZwroa/ckG4JICxvIFnSiOUyl2Uv+UTI+xIw0FfFrWS7cQFpoePpr9o8csss7KzsTzNL8Q==}
+  koa@2.16.4:
+    resolution: {integrity: sha512-3An0GCLDSR34tsCO4H8Tef8Pp2ngtaZDAZnsWJYelqXUK5wyiHvGItgK/xcSkmHLSTn1Jcho1mRQs2ehRzvKKw==}
     engines: {node: ^4.8.4 || ^6.10.1 || ^7.10.1 || >= 8.1.4}
 
   lazy-seq@1.0.0:
@@ -5622,7 +5622,7 @@ snapshots:
       methods: 1.1.2
       path-to-regexp: 6.3.0
 
-  koa@2.16.2:
+  koa@2.16.4:
     dependencies:
       accepts: 1.3.8
       cache-content-type: 1.0.1
diff --git a/pnpm-workspace.yaml b/pnpm-workspace.yaml
index 33f61829..496adcbb 100644
--- a/pnpm-workspace.yaml
+++ b/pnpm-workspace.yaml
@@ -2,3 +2,6 @@ packages:
   - packages/*
 
 minimumReleaseAge: 10080
+minimumReleaseAgeExclude:
+  # Renovate security update: koa@2.16.4
+  - koa@2.16.4