diff --git a/package-lock.json b/package-lock.json
index 934b880e0..c0ea8db14 100644
--- a/package-lock.json
+++ b/package-lock.json
@@ -10,7 +10,7 @@
       "hasInstallScript": true,
       "license": "MIT",
       "dependencies": {
-        "js-yaml": "^5.4.1"
+        "js-yaml": "^5.4.2"
       },
       "devDependencies": {
         "@loopback/docs": "latest",
@@ -396,9 +396,9 @@
       }
     },
     "node_modules/js-yaml": {
-      "version": "5.4.1",
-      "resolved": "https://registry.npmjs.org/js-yaml/-/js-yaml-5.4.1.tgz",
-      "integrity": "sha512-28R/k+NAjeuf7+CKlTxWZVExJGwVVLwY06DgEnOMz2gEpfNkDcD7QvyiVPT0xy0XXhU8vHsd4Ot42OOPdJG7dQ==",
+      "version": "5.4.2",
+      "resolved": "https://registry.npmjs.org/js-yaml/-/js-yaml-5.4.2.tgz",
+      "integrity": "sha512-m+aqu+LwO1O6sIopafj8HUVl5aawITwZQe/yHpMCKjaWBaA/d07B/QdMb3529REftiU+RMMHL3Vlsw3hON7vWg==",
       "funding": [
         {
           "type": "github",
diff --git a/package.json b/package.json
index 29a903f4e..476da7fad 100644
--- a/package.json
+++ b/package.json
@@ -36,6 +36,6 @@
   "license": "MIT",
   "author": "IBM Corp. and LoopBack contributors",
   "dependencies": {
-    "js-yaml": "^5.4.1"
+    "js-yaml": "^5.4.2"
   }
 }