diff --git a/digdag-ui/package-lock.json b/digdag-ui/package-lock.json
index e3b7a6df3c..e2e5e23fd7 100644
--- a/digdag-ui/package-lock.json
+++ b/digdag-ui/package-lock.json
@@ -9344,6 +9344,11 @@
       "integrity": "sha1-nsYfeQSYdXB9aUFFlv2Qek1xHnM=",
       "dev": true
     },
+    "querystringify": {
+      "version": "2.2.0",
+      "resolved": "https://registry.npmjs.org/querystringify/-/querystringify-2.2.0.tgz",
+      "integrity": "sha512-FIqgj2EUvTa7R50u0rGsyTftzjYmv/a3hO345bZNrqabNqjtgiDMgmo4mkUjd+nzU5oF3dClKqFIPUKybUyqoQ=="
+    },
     "randombytes": {
       "version": "2.1.0",
       "resolved": "https://registry.npmjs.org/randombytes/-/randombytes-2.1.0.tgz",
@@ -12553,19 +12558,12 @@
       }
     },
     "url-parse": {
-      "version": "1.4.3",
-      "resolved": "https://registry.npmjs.org/url-parse/-/url-parse-1.4.3.tgz",
-      "integrity": "sha512-rh+KuAW36YKo0vClhQzLLveoj8FwPJNu65xLb7Mrt+eZht0IPT0IXgSv8gcMegZ6NvjJUALf6Mf25POlMwD1Fw==",
+      "version": "1.5.9",
+      "resolved": "https://registry.npmjs.org/url-parse/-/url-parse-1.5.9.tgz",
+      "integrity": "sha512-HpOvhKBvre8wYez+QhHcYiVvVmeF6DVnuSOOPhe3cTum3BnqHhvKaZm8FU5yTiOu/Jut2ZpB2rA/SbBA1JIGlQ==",
       "requires": {
-        "querystringify": "^2.0.0",
+        "querystringify": "^2.1.1",
         "requires-port": "^1.0.0"
-      },
-      "dependencies": {
-        "querystringify": {
-          "version": "2.0.0",
-          "resolved": "https://registry.npmjs.org/querystringify/-/querystringify-2.0.0.tgz",
-          "integrity": "sha512-eTPo5t/4bgaMNZxyjWx6N2a6AuE0mq51KWvpc7nU/MAqixcI6v6KrGUKES0HaomdnolQBBXU/++X6/QQ9KL4tw=="
-        }
       }
     },
     "use": {
diff --git a/digdag-ui/package.json b/digdag-ui/package.json
index 8e683c1e12..7cfc448b67 100644
--- a/digdag-ui/package.json
+++ b/digdag-ui/package.json
@@ -48,7 +48,7 @@
     "tar-js": "^0.3.0",
     "tether": "^1.4.5",
     "urijs": "1.18.9",
-    "url-parse": "1.4.3",
+    "url-parse": "1.5.9",
     "uuid": "^3.2.1",
     "whatwg-fetch": "2.0.3"
   },