diff --git a/package-lock.json b/package-lock.json
index 2c15bd740..23529ab59 100644
--- a/package-lock.json
+++ b/package-lock.json
@@ -10,7 +10,7 @@
       "hasInstallScript": true,
       "license": "MIT",
       "dependencies": {
-        "js-yaml": "^5.2.3"
+        "js-yaml": "^5.3.0"
       },
       "devDependencies": {
         "@loopback/docs": "latest",
diff --git a/package.json b/package.json
index 0c16906ca..2a3e03db7 100644
--- a/package.json
+++ b/package.json
@@ -36,6 +36,6 @@
   "license": "MIT",
   "author": "IBM Corp. and LoopBack contributors",
   "dependencies": {
-    "js-yaml": "^5.2.3"
+    "js-yaml": "^5.3.0"
   }
 }