diff --git a/eng/Baseline.Designer.props b/eng/Baseline.Designer.props
index 888c5fa219..6f84c57d54 100644
--- a/eng/Baseline.Designer.props
+++ b/eng/Baseline.Designer.props
@@ -97,7 +97,7 @@
   </ItemGroup>
   <!-- Package: Microsoft.AspNetCore.Authentication.Cookies-->
   <PropertyGroup Condition=" '$(PackageId)' == 'Microsoft.AspNetCore.Authentication.Cookies' ">
-    <BaselinePackageVersion>2.1.2</BaselinePackageVersion>
+    <BaselinePackageVersion>2.1.16</BaselinePackageVersion>
   </PropertyGroup>
   <ItemGroup Condition=" '$(PackageId)' == 'Microsoft.AspNetCore.Authentication.Cookies' AND '$(TargetFramework)' == 'netstandard2.0' ">
     <BaselinePackageReference Include="Microsoft.AspNetCore.Authentication" Version="[2.1.2, )" />
@@ -621,7 +621,7 @@
   </ItemGroup>
   <!-- Package: Microsoft.AspNetCore.Mvc.Core-->
   <PropertyGroup Condition=" '$(PackageId)' == 'Microsoft.AspNetCore.Mvc.Core' ">
-    <BaselinePackageVersion>2.1.11</BaselinePackageVersion>
+    <BaselinePackageVersion>2.1.16</BaselinePackageVersion>
   </PropertyGroup>
   <ItemGroup Condition=" '$(PackageId)' == 'Microsoft.AspNetCore.Mvc.Core' AND '$(TargetFramework)' == 'netstandard2.0' ">
     <BaselinePackageReference Include="Microsoft.AspNetCore.Authentication.Core" Version="[2.1.1, )" />
diff --git a/eng/Baseline.xml b/eng/Baseline.xml
index 82e0aadeea..b73b3f92d7 100644
--- a/eng/Baseline.xml
+++ b/eng/Baseline.xml
@@ -14,7 +14,7 @@ build of ASP.NET Core 2.1.x. Update this list when preparing for a new patch.
   <Package Id="Microsoft.AspNetCore.Authentication.Abstractions" Version="2.1.1" />
   <Package Id="Microsoft.AspNetCore.Authentication.AzureAD.UI" Version="2.1.1" />
   <Package Id="Microsoft.AspNetCore.Authentication.AzureADB2C.UI" Version="2.1.1" />
-  <Package Id="Microsoft.AspNetCore.Authentication.Cookies" Version="2.1.2" />
+  <Package Id="Microsoft.AspNetCore.Authentication.Cookies" Version="2.1.16" />
   <Package Id="Microsoft.AspNetCore.Authentication.Core" Version="2.1.1" />
   <Package Id="Microsoft.AspNetCore.Authentication.Facebook" Version="2.1.2" />
   <Package Id="Microsoft.AspNetCore.Authentication.Google" Version="2.1.8" />
@@ -70,7 +70,7 @@ build of ASP.NET Core 2.1.x. Update this list when preparing for a new patch.
   <Package Id="Microsoft.AspNetCore.Mvc.Abstractions" Version="2.1.3" />
   <Package Id="Microsoft.AspNetCore.Mvc.Analyzers" Version="2.1.3" />
   <Package Id="Microsoft.AspNetCore.Mvc.ApiExplorer" Version="2.1.3" />
-  <Package Id="Microsoft.AspNetCore.Mvc.Core" Version="2.1.11" />
+  <Package Id="Microsoft.AspNetCore.Mvc.Core" Version="2.1.16" />
   <Package Id="Microsoft.AspNetCore.Mvc.Cors" Version="2.1.3" />
   <Package Id="Microsoft.AspNetCore.Mvc.DataAnnotations" Version="2.1.3" />
   <Package Id="Microsoft.AspNetCore.Mvc.Formatters.Json" Version="2.1.3" />