diff --git a/package.json b/package.json
index baa4781bc2f..40d3dee1306 100644
--- a/package.json
+++ b/package.json
@@ -86,7 +86,7 @@
     "image-size": "0.8.3",
     "intl": "1.2.5",
     "intl-messageformat": "5.4.3",
-    "js-yaml": "3.13.1",
+    "js-yaml": "4.1.1",
     "jsonpath": "1.0.2",
     "jsonwebtoken": "8.5.1",
     "juice": "6.0.0",
diff --git a/yarn.lock b/yarn.lock
index 9b18f8499dc..04a319b6b94 100644
--- a/yarn.lock
+++ b/yarn.lock
@@ -741,6 +741,11 @@ argparse@^1.0.7:
   dependencies:
     sprintf-js "~1.0.2"
 
+argparse@^2.0.1:
+  version "2.0.1"
+  resolved "https://registry.yarnpkg.com/argparse/-/argparse-2.0.1.tgz#246f50f3ca78a3240f6c997e8a9bd1eac49e4b38"
+  integrity sha512-8+9WqebbFzpX9OR+Wa6O29asIogeRMzcGtAINdpMHHyAg10f05aSFVBbcEqGf/PXw1EjAZ+q2/bEBg3DvurK3Q==
+
 arr-diff@^4.0.0:
   version "4.0.0"
   resolved "https://registry.yarnpkg.com/arr-diff/-/arr-diff-4.0.0.tgz#d6461074febfec71e7e15235761a329a5dc7c520"
@@ -4896,6 +4901,13 @@ js-yaml@3.13.1, js-yaml@^3.13.0, js-yaml@^3.13.1, js-yaml@^3.9.1, js-yaml@~3.13.
     argparse "^1.0.7"
     esprima "^4.0.0"
 
+js-yaml@4.1.1:
+  version "4.1.1"
+  resolved "https://registry.yarnpkg.com/js-yaml/-/js-yaml-4.1.1.tgz#854c292467705b699476e1a2decc0c8a3458806b"
+  integrity sha512-qQKT4zQxXl8lLwBtHMWwaTcGfFOZviOJet3Oy/xmGk2gZH677CJM9EvtfdSkgWcATZhj/55JZ0rmy3myCT5lsA==
+  dependencies:
+    argparse "^2.0.1"
+
 js-yaml@~3.7.0:
   version "3.7.0"
   resolved "https://registry.yarnpkg.com/js-yaml/-/js-yaml-3.7.0.tgz#5c967ddd837a9bfdca5f2de84253abe8a1c03b80"