diff --git a/package-lock.json b/package-lock.json
index d66bef64..e75d6fec 100644
--- a/package-lock.json
+++ b/package-lock.json
@@ -2526,9 +2526,9 @@
       }
     },
     "commander": {
-      "version": "2.18.0",
-      "resolved": "https://registry.npmjs.org/commander/-/commander-2.18.0.tgz",
-      "integrity": "sha512-6CYPa+JP2ftfRU2qkDK+UTVeQYosOg/2GbcjIcKPHfinyOLPVGXu/ovN86RP49Re5ndJK1N0kuiidFFuepc4ZQ=="
+      "version": "2.19.0",
+      "resolved": "https://registry.npmjs.org/commander/-/commander-2.19.0.tgz",
+      "integrity": "sha512-6tvAOO+D6OENvRAh524Dh9jcfKTYDQAqvqezbCW82xj5X0pSrcpxtvRKHLG0yBY6SD7PSDrJaj+0AiOcKVd1Xg=="
     },
     "component-emitter": {
       "version": "1.2.1",
@@ -6144,6 +6144,12 @@
         "stringify-object": "3.2.2"
       },
       "dependencies": {
+        "commander": {
+          "version": "2.18.0",
+          "resolved": "https://registry.npmjs.org/commander/-/commander-2.18.0.tgz",
+          "integrity": "sha512-6CYPa+JP2ftfRU2qkDK+UTVeQYosOg/2GbcjIcKPHfinyOLPVGXu/ovN86RP49Re5ndJK1N0kuiidFFuepc4ZQ==",
+          "dev": true
+        },
         "pify": {
           "version": "3.0.0",
           "resolved": "https://registry.npmjs.org/pify/-/pify-3.0.0.tgz",
@@ -7250,6 +7256,14 @@
         "commander": "2.18.0",
         "npm-path": "2.0.4",
         "which": "1.3.1"
+      },
+      "dependencies": {
+        "commander": {
+          "version": "2.18.0",
+          "resolved": "https://registry.npmjs.org/commander/-/commander-2.18.0.tgz",
+          "integrity": "sha512-6CYPa+JP2ftfRU2qkDK+UTVeQYosOg/2GbcjIcKPHfinyOLPVGXu/ovN86RP49Re5ndJK1N0kuiidFFuepc4ZQ==",
+          "dev": true
+        }
       }
     },
     "npmlog": {
diff --git a/package.json b/package.json
index 87c0eae4..69f497bd 100644
--- a/package.json
+++ b/package.json
@@ -25,7 +25,7 @@
     "@parse/simple-mailgun-adapter": "1.1.0",
     "bcryptjs": "2.4.3",
     "body-parser": "1.18.3",
-    "commander": "2.18.0",
+    "commander": "2.19.0",
     "deepcopy": "1.0.0",
     "express": "4.16.2",
     "follow-redirects": "1.5.9",