diff --git a/.pnp.cjs b/.pnp.cjs
index 52a9144a06..1e39338857 100644
--- a/.pnp.cjs
+++ b/.pnp.cjs
@@ -73,7 +73,7 @@ const RAW_RUNTIME_STATE =
           ["jsdom", "virtual:dc3fc578bfa5e06182a4d2be39ede0bc5b74940b1ffe0d70c26892ab140a4699787750fba175dc306292e80b4aa2c8c5f68c2a821e69b2c37e360c0dff36ff66#npm:24.0.0"],\
           ["lerna", "npm:3.20.2"],\
           ["lint-staged", "npm:10.5.4"],\
-          ["mongoose", "npm:6.13.5"],\
+          ["mongoose", "npm:6.13.6"],\
           ["pinst", "npm:2.1.6"],\
           ["prettier", "npm:2.4.1"],\
           ["react", "npm:18.2.0"],\
@@ -5074,7 +5074,7 @@ const RAW_RUNTIME_STATE =
           ["keyv", "npm:4.5.3"],\
           ["mime-types", "npm:2.1.32"],\
           ["mongodb-memory-server", "npm:9.2.0"],\
-          ["mongoose", "npm:6.13.5"],\
+          ["mongoose", "npm:6.13.6"],\
           ["morgan", "npm:1.10.0"],\
           ["node-mailjet", "npm:3.3.5"],\
           ["nodemon", "npm:3.1.0"],\
@@ -17791,10 +17791,10 @@ const RAW_RUNTIME_STATE =
       }]\
     ]],\
     ["mongoose", [\
-      ["npm:6.13.5", {\
-        "packageLocation": "./.yarn/cache/mongoose-npm-6.13.5-9974435c8a-99c469b660.zip/node_modules/mongoose/",\
+      ["npm:6.13.6", {\
+        "packageLocation": "./.yarn/cache/mongoose-npm-6.13.6-82e69c3774-eaaa9f8705.zip/node_modules/mongoose/",\
         "packageDependencies": [\
-          ["mongoose", "npm:6.13.5"],\
+          ["mongoose", "npm:6.13.6"],\
           ["bson", "npm:4.7.2"],\
           ["kareem", "npm:2.5.1"],\
           ["mongodb", "npm:4.17.2"],\
@@ -21603,7 +21603,7 @@ const RAW_RUNTIME_STATE =
           ["jsdom", "virtual:dc3fc578bfa5e06182a4d2be39ede0bc5b74940b1ffe0d70c26892ab140a4699787750fba175dc306292e80b4aa2c8c5f68c2a821e69b2c37e360c0dff36ff66#npm:24.0.0"],\
           ["lerna", "npm:3.20.2"],\
           ["lint-staged", "npm:10.5.4"],\
-          ["mongoose", "npm:6.13.5"],\
+          ["mongoose", "npm:6.13.6"],\
           ["pinst", "npm:2.1.6"],\
           ["prettier", "npm:2.4.1"],\
           ["react", "npm:18.2.0"],\
diff --git a/package.json b/package.json
index 617a49aa20..e2a6471610 100644
--- a/package.json
+++ b/package.json
@@ -37,7 +37,7 @@
     "jsdom": "24.0.0",
     "lerna": "3.20.2",
     "lint-staged": "^10.5.4",
-    "mongoose": "6.13.5",
+    "mongoose": "6.13.6",
     "pinst": "^2.1.6",
     "prettier": "^2.2.1",
     "react": "18.2.0",
diff --git a/packages/openneuro-server/package.json b/packages/openneuro-server/package.json
index a2054abeae..cd429d1309 100644
--- a/packages/openneuro-server/package.json
+++ b/packages/openneuro-server/package.json
@@ -43,7 +43,7 @@
     "keyv": "^4.5.3",
     "mime-types": "^2.1.19",
     "mongodb-memory-server": "^9.2.0",
-    "mongoose": "6.13.5",
+    "mongoose": "6.13.6",
     "morgan": "^1.6.1",
     "node-mailjet": "^3.3.5",
     "object-hash": "2.1.1",
diff --git a/yarn.lock b/yarn.lock
index 5b5e16cc16..d268c44796 100644
--- a/yarn.lock
+++ b/yarn.lock
@@ -4142,7 +4142,7 @@ __metadata:
     keyv: "npm:^4.5.3"
     mime-types: "npm:^2.1.19"
     mongodb-memory-server: "npm:^9.2.0"
-    mongoose: "npm:6.13.5"
+    mongoose: "npm:6.13.6"
     morgan: "npm:^1.6.1"
     node-mailjet: "npm:^3.3.5"
     nodemon: "npm:3.1.0"
@@ -15106,9 +15106,9 @@ __metadata:
   languageName: node
   linkType: hard
 
-"mongoose@npm:6.13.5":
-  version: 6.13.5
-  resolution: "mongoose@npm:6.13.5"
+"mongoose@npm:6.13.6":
+  version: 6.13.6
+  resolution: "mongoose@npm:6.13.6"
   dependencies:
     bson: "npm:^4.7.2"
     kareem: "npm:2.5.1"
@@ -15117,7 +15117,7 @@ __metadata:
     mquery: "npm:4.0.3"
     ms: "npm:2.1.3"
     sift: "npm:16.0.1"
-  checksum: 10/99c469b660014abfc69c383fefbea469e346b699ca9a8131399febca6fec40277f8562749882e6142070ce049791117533f5d7146e54417c8962604582a2cf00
+  checksum: 10/eaaa9f8705c90e6608cb637710c9465dd711acc5e893f3bfbe64130b8c372770b17bb259c071599df1b490a34f8aee86cfd22bcf92dc777ac3c6cd2c567cb366
   languageName: node
   linkType: hard
 
@@ -18391,7 +18391,7 @@ __metadata:
     jsdom: "npm:24.0.0"
     lerna: "npm:3.20.2"
     lint-staged: "npm:^10.5.4"
-    mongoose: "npm:6.13.5"
+    mongoose: "npm:6.13.6"
     pinst: "npm:^2.1.6"
     prettier: "npm:^2.2.1"
     react: "npm:18.2.0"