diff --git a/node/package-lock.json b/node/package-lock.json
index be85c587..a5a96835 100644
--- a/node/package-lock.json
+++ b/node/package-lock.json
@@ -357,9 +357,9 @@
       "integrity": "sha1-WQxhFWsK4vTwJVcyoViyZrxWsh0="
     },
     "ejs": {
-      "version": "2.5.9",
-      "resolved": "https://registry.npmjs.org/ejs/-/ejs-2.5.9.tgz",
-      "integrity": "sha512-GJCAeDBKfREgkBtgrYSf9hQy9kTb3helv0zGdzqhM7iAkW8FA/ZF97VQDbwFiwIT8MQLLOe5VlPZOEvZAqtUAQ=="
+      "version": "2.7.4",
+      "resolved": "https://registry.npmjs.org/ejs/-/ejs-2.7.4.tgz",
+      "integrity": "sha512-7vmuyh5+kuUyJKePhQfRQBhXV5Ce+RnaeeQArKu1EAMpL3WbgMt5WG6uQZpEVvYSSsxMXRKOewtDk9RaTKXRlA=="
     },
     "emoji-regex": {
       "version": "7.0.3",
diff --git a/node/package.json b/node/package.json
index dd33cdab..f2e9a343 100644
--- a/node/package.json
+++ b/node/package.json
@@ -14,7 +14,7 @@
   "dependencies": {
     "body-parser": "1.18.x",
     "dotenv": "^8.2.0",
-    "ejs": "2.5.x",
+    "ejs": "2.7.4",
     "express": "4.16.x",
     "moment": "2.22.x",
     "nodemon": "^2.0.5",