diff --git a/samples/EPiServer.Reference.Commerce.Site/packages.config b/samples/EPiServer.Reference.Commerce.Site/packages.config
index aeaa817..a5f2833 100644
--- a/samples/EPiServer.Reference.Commerce.Site/packages.config
+++ b/samples/EPiServer.Reference.Commerce.Site/packages.config
@@ -45,7 +45,7 @@
   <package id="Microsoft.Owin" version="3.1.0" targetFramework="net461" />
   <package id="Microsoft.Owin.Host.SystemWeb" version="3.1.0" targetFramework="net461" />
   <package id="Microsoft.Owin.Security" version="3.1.0" targetFramework="net461" />
-  <package id="Microsoft.Owin.Security.Cookies" version="3.1.0" targetFramework="net461" />
+  <package id="Microsoft.Owin.Security.Cookies" version="4.2.2" targetFramework="net461" />
   <package id="Microsoft.Owin.Security.Facebook" version="3.1.0" targetFramework="net461" />
   <package id="Microsoft.Owin.Security.Google" version="3.1.0" targetFramework="net461" />
   <package id="Microsoft.Owin.Security.MicrosoftAccount" version="3.1.0" targetFramework="net461" />