diff --git a/package-lock.json b/package-lock.json
index 8ea8ddd094..7f12c7d96a 100644
--- a/package-lock.json
+++ b/package-lock.json
@@ -4643,9 +4643,9 @@
       }
     },
     "commander": {
-      "version": "5.0.0",
-      "resolved": "https://registry.npmjs.org/commander/-/commander-5.0.0.tgz",
-      "integrity": "sha512-JrDGPAKjMGSP1G0DUoaceEJ3DZgAfr/q6X7FVk4+U5KxUSKviYGM2k6zWkfyyBHy5rAtzgYJFa1ro2O9PtoxwQ=="
+      "version": "6.2.0",
+      "resolved": "https://registry.npmjs.org/commander/-/commander-6.2.0.tgz",
+      "integrity": "sha512-zP4jEKbe8SHzKJYQmq8Y9gYjtO/POJLgIdKgV7B9qNmABVFVc+ctqSX6iXh4mCpJfRBOabiZ2YKPg8ciDw6C+Q=="
     },
     "commondir": {
       "version": "1.0.1",
diff --git a/package.json b/package.json
index eb599d770a..853f3cfd24 100644
--- a/package.json
+++ b/package.json
@@ -39,7 +39,7 @@
     "bcryptjs": "2.3.0",
     "body-parser": "1.19.0",
     "codemirror-graphql": "github:timsuchanek/codemirror-graphql#details-fix",
-    "commander": "5.0.0",
+    "commander": "6.2.0",
     "connect-flash": "0.1.1",
     "cookie-session": "2.0.0-beta.3",
     "copy-to-clipboard": "^3.2.0",