diff --git a/patches/304770.patch b/patches/304770.patch
new file mode 100644
index 00000000..46b6daa4
--- /dev/null
+++ b/patches/304770.patch
@@ -0,0 +1,43 @@
+diff --git a/pkgs/servers/matrix-synapse/matrix-hookshot/package.json b/pkgs/servers/matrix-synapse/matrix-hookshot/package.json
+index 68f75d734bd7ff..0fe78286dc5e03 100644
+--- a/pkgs/servers/matrix-synapse/matrix-hookshot/package.json
++++ b/pkgs/servers/matrix-synapse/matrix-hookshot/package.json
+@@ -1,6 +1,6 @@
+ {
+   "name": "matrix-hookshot",
+-  "version": "5.2.1",
++  "version": "5.3.0",
+   "description": "A bridge between Matrix and multiple project management services, such as GitHub, GitLab and JIRA.",
+   "main": "lib/app.js",
+   "repository": "https://github.com/matrix-org/matrix-hookshot",
+@@ -55,6 +55,7 @@
+     "cors": "^2.8.5",
+     "express": "^4.18.2",
+     "figma-js": "^1.14.0",
++    "helmet": "^7.1.0",
+     "http-status-codes": "^2.2.0",
+     "ioredis": "^5.2.3",
+     "jira-client": "^8.2.2",
+@@ -114,6 +115,6 @@
+     "ts-jest": "^29.1.1",
+     "ts-node": "^10.9.1",
+     "typescript": "^5.3.3",
+-    "vite": "^5.0.12"
++    "vite": "^5.0.13"
+   }
+ }
+diff --git a/pkgs/servers/matrix-synapse/matrix-hookshot/pin.json b/pkgs/servers/matrix-synapse/matrix-hookshot/pin.json
+index 08607edb950555..5ab03440fc91e4 100644
+--- a/pkgs/servers/matrix-synapse/matrix-hookshot/pin.json
++++ b/pkgs/servers/matrix-synapse/matrix-hookshot/pin.json
+@@ -1,6 +1,6 @@
+ {
+-  "version": "5.2.1",
+-  "srcHash": "sha256-yh8erXI1r9BqdJvEdk2WuBojXUK7VQf9bc4GQ2a2vIo=",
+-  "yarnHash": "0nps2wbpkaivi9wb9zcqsrg77w9mm7inls9jqsx7xmyn4ashbs1p",
+-  "cargoHash": "sha256-3euxhE9Y3N9bxo5S+l2mhYF575EoC/A5pH/mD+Ey86g="
++  "version": "5.3.0",
++  "srcHash": "sha256-saniKtauX+9lZxPZOtGLlk4//ht0njgWfnOIJsdQlOQ=",
++  "yarnHash": "1a52j61mb5hq62wd681zqpw7fkjhabqicdyvmam4jdd2qz2vh0w1",
++  "cargoHash": "sha256-ffjAsYOML+mDBToaVVuxjLUUEpGmBzWB0nN4jzOO098="
+ }