diff --git a/package-lock.json b/package-lock.json
index cd4a248..2da1dbf 100644
--- a/package-lock.json
+++ b/package-lock.json
@@ -262,11 +262,11 @@
       }
     },
     "config": {
-      "version": "3.2.1",
-      "resolved": "https://registry.npmjs.org/config/-/config-3.2.1.tgz",
-      "integrity": "sha512-EMA/IU0gBI3OZHi41B2JaosXEc6tJMN8RT3Pm5cHuRfbtfAQbNmYB6bFq0JK8tRu8F2WZ8s+5tnUX7acEy37xw==",
+      "version": "3.3.8",
+      "resolved": "https://registry.npmjs.org/config/-/config-3.3.8.tgz",
+      "integrity": "sha512-rFzF6VESOdp7wAXFlB9IOZI4ouL05g3A03v2eRcTHj2JBQaTNJ40zhAUl5wRbWHqLZ+uqp/7OE0BWWtAVgrong==",
       "requires": {
-        "json5": "^1.0.1"
+        "json5": "^2.2.1"
       }
     },
     "content-disposition": {
@@ -701,19 +701,9 @@
       "integrity": "sha1-Epai1Y/UXxmg9s4B1lcB4sc1tus="
     },
     "json5": {
-      "version": "1.0.1",
-      "resolved": "https://registry.npmjs.org/json5/-/json5-1.0.1.tgz",
-      "integrity": "sha512-aKS4WQjPenRxiQsC93MNfjx+nbF4PAdYzmd/1JIj8HYzqfbu86beTuNgXDzPknWk0n0uARlyewZo4s++ES36Ow==",
-      "requires": {
-        "minimist": "^1.2.0"
-      },
-      "dependencies": {
-        "minimist": {
-          "version": "1.2.0",
-          "resolved": "https://registry.npmjs.org/minimist/-/minimist-1.2.0.tgz",
-          "integrity": "sha1-o1AIsg9BOD7sH7kU9M1d95omQoQ="
-        }
-      }
+      "version": "2.2.3",
+      "resolved": "https://registry.npmjs.org/json5/-/json5-2.2.3.tgz",
+      "integrity": "sha512-XmOWe7eyHYH14cLdVPoyg+GOH3rYX++KpzrylJwSW98t3Nk+U8XOl8FWKOgwtzdb8lXGf6zYwDUzeHMWfxasyg=="
     },
     "jsprim": {
       "version": "1.4.1",
diff --git a/package.json b/package.json
index c8d6a1e..f697e69 100644
--- a/package.json
+++ b/package.json
@@ -6,7 +6,7 @@
   "dependencies": {
     "array-flatten": "^2.1.2",
     "body-parser": "^1.19.0",
-    "config": "^3.2.1",
+    "config": "^3.3.8",
     "express": "^4.16.4",
     "express-handlebars": "^3.0.2",
     "express-validator": "^5.3.1",