diff --git a/package-lock.json b/package-lock.json
index df53bc2f..ae03511d 100644
--- a/package-lock.json
+++ b/package-lock.json
@@ -2248,9 +2248,9 @@
       }
     },
     "commander": {
-      "version": "2.19.0",
-      "resolved": "https://registry.npmjs.org/commander/-/commander-2.19.0.tgz",
-      "integrity": "sha512-6tvAOO+D6OENvRAh524Dh9jcfKTYDQAqvqezbCW82xj5X0pSrcpxtvRKHLG0yBY6SD7PSDrJaj+0AiOcKVd1Xg=="
+      "version": "2.20.0",
+      "resolved": "https://registry.npmjs.org/commander/-/commander-2.20.0.tgz",
+      "integrity": "sha512-7j2y+40w61zy6YC2iRNpUe/NwhNyoXrYpHMrSunaMG64nRnaf96zO/KMQR4OyN/UnE5KLyEBnKHd4aG3rskjpQ=="
     },
     "component-emitter": {
       "version": "1.2.1",
diff --git a/package.json b/package.json
index 0331b627..23f487bc 100644
--- a/package.json
+++ b/package.json
@@ -25,7 +25,7 @@
     "@parse/simple-mailgun-adapter": "1.1.0",
     "bcryptjs": "2.4.3",
     "body-parser": "1.18.3",
-    "commander": "2.19.0",
+    "commander": "2.20.0",
     "deepcopy": "2.0.0",
     "express": "4.16.4",
     "follow-redirects": "1.7.0",