diff --git a/package-lock.json b/package-lock.json
index ec7f13cd1..16116a3bd 100644
--- a/package-lock.json
+++ b/package-lock.json
@@ -10,7 +10,7 @@
       "license": "AGPL-3.0-only",
       "dependencies": {
         "grapheme-breaker": "^0.3.2",
-        "hull.js": "0.2.10",
+        "hull.js": "1.0.6",
         "ify-loader": "^1.0.4",
         "linebreak": "^0.3.0",
         "minilog": "^3.1.0",
@@ -9751,9 +9751,9 @@
       }
     },
     "node_modules/hull.js": {
-      "version": "0.2.10",
-      "resolved": "https://registry.npmjs.org/hull.js/-/hull.js-0.2.10.tgz",
-      "integrity": "sha512-UO3W30HxhWgeSpNKCdXt00xkwjRTGmhQaoZNP8ll509Nl+DP9juXE3wRGizihuop08FSB4xtAWIbWSe+RxEoog==",
+      "version": "1.0.6",
+      "resolved": "https://registry.npmjs.org/hull.js/-/hull.js-1.0.6.tgz",
+      "integrity": "sha512-TC7e9sHYOaCVms0sn2hN7buxnaGfcl9h5EPVoVX9DTPoMpqQiS9bf3tmGDgiNaMVHBD91RAvWjCxrJ5Jx8BI5A==",
       "deprecated": "This package is unmaintained and vulnerable. Do not use it.",
       "license": "BSD"
     },
@@ -20828,6 +20828,14 @@
         "base64-loader": "^1.0.0"
       }
     },
+    "node_modules/scratch-render/node_modules/hull.js": {
+      "version": "0.2.10",
+      "resolved": "https://registry.npmjs.org/hull.js/-/hull.js-0.2.10.tgz",
+      "integrity": "sha512-UO3W30HxhWgeSpNKCdXt00xkwjRTGmhQaoZNP8ll509Nl+DP9juXE3wRGizihuop08FSB4xtAWIbWSe+RxEoog==",
+      "deprecated": "This package is unmaintained and vulnerable. Do not use it.",
+      "dev": true,
+      "license": "BSD"
+    },
     "node_modules/scratch-sb1-converter": {
       "version": "2.0.278",
       "resolved": "https://registry.npmjs.org/scratch-sb1-converter/-/scratch-sb1-converter-2.0.278.tgz",
diff --git a/package.json b/package.json
index 60eb6322f..eb2451ff6 100644
--- a/package.json
+++ b/package.json
@@ -39,7 +39,7 @@
   ],
   "dependencies": {
     "grapheme-breaker": "^0.3.2",
-    "hull.js": "0.2.10",
+    "hull.js": "1.0.6",
     "ify-loader": "^1.0.4",
     "linebreak": "^0.3.0",
     "minilog": "^3.1.0",