diff --git a/flights-api/package-lock.json b/flights-api/package-lock.json
index 2e5ebc7..3a7e801 100644
--- a/flights-api/package-lock.json
+++ b/flights-api/package-lock.json
@@ -53,11 +53,11 @@
       "integrity": "sha1-8S4PPF13sLHN2RRpQuTpbB5N1SU="
     },
     "async": {
-      "version": "2.6.1",
-      "resolved": "https://registry.npmjs.org/async/-/async-2.6.1.tgz",
-      "integrity": "sha512-fNEiL2+AZt6AlAw/29Cr0UDe4sRAHCpEHh54WMz+Bb7QfNcFw4h3loofyJpLeQs4Yx7yuqu/2dLgM5hKOs6HlQ==",
+      "version": "2.6.4",
+      "resolved": "https://registry.npmjs.org/async/-/async-2.6.4.tgz",
+      "integrity": "sha512-mzo5dfJYwAn29PeiJ0zvwTo04zj8HDJj0Mn8TD7sno7q12prdbnasKJHhkm2c1LgrhlJ0teaea8860oxi51mGA==",
       "requires": {
-        "lodash": "^4.17.10"
+        "lodash": "^4.17.14"
       }
     },
     "asynckit": {
diff --git a/flights-api/package.json b/flights-api/package.json
index 02db0e1..97016c2 100644
--- a/flights-api/package.json
+++ b/flights-api/package.json
@@ -15,7 +15,7 @@
   },
   "dependencies": {
     "applicationinsights": "^1.0.4",
-    "async": "^2.6.1",
+    "async": "^2.6.4",
     "body-parser": "^1.18.3",
     "cookie-parser": "~1.4.3",
     "dayjs": "^1.7.5",