diff --git a/package-lock.json b/package-lock.json
index 984e75c02d..f582e63a01 100644
--- a/package-lock.json
+++ b/package-lock.json
@@ -9324,9 +9324,9 @@
       "integrity": "sha1-VgiurfwAvmwpAd9fmGF4jeDVl8g="
     },
     "mustache": {
-      "version": "4.1.0",
-      "resolved": "https://registry.npmjs.org/mustache/-/mustache-4.1.0.tgz",
-      "integrity": "sha512-0FsgP/WVq4mKyjolIyX+Z9Bd+3WS8GOwoUTyKXT5cTYMGeauNTi2HPCwERqseC1IHAy0Z7MDZnJBfjabd4O8GQ=="
+      "version": "4.2.0",
+      "resolved": "https://registry.npmjs.org/mustache/-/mustache-4.2.0.tgz",
+      "integrity": "sha512-71ippSywq5Yb7/tVYyGbkBggbU8H3u5Rz56fH60jGFgr8uHwxs+aSKeqmluIVzM0m0kB7xQjKS6qPfd0b2ZoqQ=="
     },
     "mute-stream": {
       "version": "0.0.8",
diff --git a/package.json b/package.json
index 8f2a7d7aa9..fcb03a139f 100644
--- a/package.json
+++ b/package.json
@@ -46,7 +46,7 @@
     "lru-cache": "5.1.1",
     "mime": "2.5.2",
     "mongodb": "3.6.6",
-    "mustache": "4.1.0",
+    "mustache": "4.2.0",
     "parse": "3.1.0",
     "pg-monitor": "1.4.1",
     "pg-promise": "10.9.2",