diff --git a/install/package.json b/install/package.json
index d5581b8c1e..abf3675dba 100644
--- a/install/package.json
+++ b/install/package.json
@@ -67,7 +67,7 @@
         "daemon": "1.1.0",
         "diff": "8.0.3",
         "esbuild": "0.27.3",
-        "express": "5.1.0",
+        "express": "5.2.1",
         "express-session": "1.19.0",
         "express-useragent": "2.1.0",
         "fetch-cookie": "3.2.0",
diff --git a/src/routes/activitypub.js b/src/routes/activitypub.js
index e26379eefb..eea4b815b4 100644
--- a/src/routes/activitypub.js
+++ b/src/routes/activitypub.js
@@ -47,14 +47,13 @@ module.exports = function (app, middleware, controllers) {
 	app.get('/post/:pid', [...middlewares, middleware.assert.post], helpers.tryRoute(controllers.activitypub.actors.note));
 	app.get('/post/:pid/replies', [...middlewares, middleware.assert.post], helpers.tryRoute(controllers.activitypub.actors.replies));
 
-	app.get('/topic/:tid/{:slug}', [...middlewares, middleware.assert.topic], helpers.tryRoute(controllers.activitypub.actors.topic));
+	app.get('/topic/:tid{/:slug}', [...middlewares, middleware.assert.topic], helpers.tryRoute(controllers.activitypub.actors.topic));
 
 	app.get('/category/:cid/inbox', [...middlewares, middleware.assert.category], helpers.tryRoute(controllers.activitypub.getInbox));
 	app.post('/category/:cid/inbox', [...inboxMiddlewares, middleware.assert.category, ...inboxMiddlewares], helpers.tryRoute(controllers.activitypub.postInbox));
 	app.get('/category/:cid/outbox', [...middlewares, middleware.assert.category], helpers.tryRoute(controllers.activitypub.getCategoryOutbox));
 	app.post('/category/:cid/outbox', [...middlewares, middleware.assert.category], helpers.tryRoute(controllers.activitypub.postOutbox));
-	app.get('/category/:cid/{:slug}', [...middlewares, middleware.assert.category], helpers.tryRoute(controllers.activitypub.actors.category));
-
+	app.get('/category/:cid{/:slug}', [...middlewares, middleware.assert.category], helpers.tryRoute(controllers.activitypub.actors.category));
 
 	app.get('/message/:mid', [...middlewares, middleware.assert.message], helpers.tryRoute(controllers.activitypub.actors.message));
 };