diff --git a/parlai/mturk/core/legacy_2018/server_legacy/package.json b/parlai/mturk/core/legacy_2018/server_legacy/package.json
index 82e8320bf8b..f23314ee521 100644
--- a/parlai/mturk/core/legacy_2018/server_legacy/package.json
+++ b/parlai/mturk/core/legacy_2018/server_legacy/package.json
@@ -16,7 +16,7 @@
     "async-lock": "1.0.0",
     "body-parser": "1.17.2",
     "express": "4.15.3",
-    "nunjucks": "3.0.1",
+    "nunjucks": "3.2.3",
     "pg": "7.0.2",
     "pg-hstore": "2.3.2",
     "sequelize": ">=5.3.0",