diff --git a/package.json b/package.json
index bc3584ff2..8cb38e2df 100644
--- a/package.json
+++ b/package.json
@@ -69,7 +69,7 @@
     "toobusy-js": "^0.5.1",
     "urban": "^0.3.2",
     "uuid": "^3.3.2",
-    "vm2": "^3.6.4",
+    "vm2": "^3.9.5",
     "wikijs": "^6.0.0",
     "winston": "^3.2.1",
     "winston-daily-rotate-file": "^3.5.1",
diff --git a/yarn.lock b/yarn.lock
index 515b90deb..48f658fa3 100644
--- a/yarn.lock
+++ b/yarn.lock
@@ -2815,6 +2815,12 @@ rimraf@^2.6.1:
   dependencies:
     glob "^7.0.5"
 
+rimraf@^3.0.0:
+  version "3.0.2"
+  resolved "https://registry.yarnpkg.com/rimraf/-/rimraf-3.0.2.tgz#f1a5402ba6220ad52cc1282bac1ae3aa49fd061a"
+  dependencies:
+    glob "^7.1.3"
+
 rss-parser@^3.6.0:
   version "3.6.0"
   resolved "https://registry.yarnpkg.com/rss-parser/-/rss-parser-3.6.0.tgz#6ded6f1d25e092fcec813fab383200557ae84fdd"
@@ -3323,9 +3329,9 @@ verror@1.10.0:
     core-util-is "1.0.2"
     extsprintf "^1.2.0"
 
-vm2@^3.6.4:
-  version "3.6.4"
-  resolved "https://registry.yarnpkg.com/vm2/-/vm2-3.6.4.tgz#88b27a9f328a0630671841363692a57d24dead33"
+vm2@^3.9.5:
+  version "3.9.5"
+  resolved "https://registry.yarnpkg.com/vm2/-/vm2-3.9.5.tgz#5288044860b4bbace443101fcd3bddb2a0aa2496"
 
 whatwg-fetch@3.0.0:
   version "3.0.0"