diff --git a/package-lock.json b/package-lock.json
index 0269598bc..93eb8b4ba 100644
--- a/package-lock.json
+++ b/package-lock.json
@@ -12,7 +12,7 @@
         "@overturebio-stack/lectern-client": "1.4.0",
         "@types/mongoose-paginate-v2": "^1.3.11",
         "adm-zip": "^0.4.16",
-        "async": "^3.0.1",
+        "async": "^3.2.2",
         "bcrypt-nodejs": "^0.0.3",
         "bluebird": "^3.5.5",
         "body-parser": "^1.19.0",
@@ -1350,9 +1350,9 @@
       }
     },
     "node_modules/async": {
-      "version": "3.1.0",
-      "resolved": "https://registry.npmjs.org/async/-/async-3.1.0.tgz",
-      "integrity": "sha512-4vx/aaY6j/j3Lw3fbCHNWP0pPaTCew3F6F3hYyl/tHs/ndmV1q7NW9T5yuJ2XAGwdQrP+6Wu20x06U4APo/iQQ=="
+      "version": "3.2.2",
+      "resolved": "https://registry.npmjs.org/async/-/async-3.2.2.tgz",
+      "integrity": "sha512-H0E+qZaDEfx/FY4t7iLRv1W2fFI6+pyCeTw1uN20AQPiwqwM6ojPxHxdLv4z8hi2DtnW9BOckSspLucW7pIE5g=="
     },
     "node_modules/asynckit": {
       "version": "0.4.0",
@@ -8972,9 +8972,9 @@
       "dev": true
     },
     "async": {
-      "version": "3.1.0",
-      "resolved": "https://registry.npmjs.org/async/-/async-3.1.0.tgz",
-      "integrity": "sha512-4vx/aaY6j/j3Lw3fbCHNWP0pPaTCew3F6F3hYyl/tHs/ndmV1q7NW9T5yuJ2XAGwdQrP+6Wu20x06U4APo/iQQ=="
+      "version": "3.2.2",
+      "resolved": "https://registry.npmjs.org/async/-/async-3.2.2.tgz",
+      "integrity": "sha512-H0E+qZaDEfx/FY4t7iLRv1W2fFI6+pyCeTw1uN20AQPiwqwM6ojPxHxdLv4z8hi2DtnW9BOckSspLucW7pIE5g=="
     },
     "asynckit": {
       "version": "0.4.0",
diff --git a/package.json b/package.json
index 2326712fe..4df2a22df 100644
--- a/package.json
+++ b/package.json
@@ -98,7 +98,7 @@
     "@overturebio-stack/lectern-client": "1.4.0",
     "@types/mongoose-paginate-v2": "^1.3.11",
     "adm-zip": "^0.4.16",
-    "async": "^3.0.1",
+    "async": "^3.2.2",
     "bcrypt-nodejs": "^0.0.3",
     "bluebird": "^3.5.5",
     "body-parser": "^1.19.0",