diff --git a/package-lock.json b/package-lock.json
index 53da0b5226..fa0d890b5a 100644
--- a/package-lock.json
+++ b/package-lock.json
@@ -9370,9 +9370,9 @@
       "integrity": "sha1-VgiurfwAvmwpAd9fmGF4jeDVl8g="
     },
     "mustache": {
-      "version": "4.1.0",
-      "resolved": "https://registry.npmjs.org/mustache/-/mustache-4.1.0.tgz",
-      "integrity": "sha512-0FsgP/WVq4mKyjolIyX+Z9Bd+3WS8GOwoUTyKXT5cTYMGeauNTi2HPCwERqseC1IHAy0Z7MDZnJBfjabd4O8GQ=="
+      "version": "4.2.0",
+      "resolved": "https://registry.npmjs.org/mustache/-/mustache-4.2.0.tgz",
+      "integrity": "sha512-71ippSywq5Yb7/tVYyGbkBggbU8H3u5Rz56fH60jGFgr8uHwxs+aSKeqmluIVzM0m0kB7xQjKS6qPfd0b2ZoqQ=="
     },
     "mute-stream": {
       "version": "0.0.8",
diff --git a/package.json b/package.json
index 69c1eda029..54d6c542d0 100644
--- a/package.json
+++ b/package.json
@@ -46,7 +46,7 @@
     "lru-cache": "5.1.1",
     "mime": "2.5.2",
     "mongodb": "3.6.6",
-    "mustache": "4.1.0",
+    "mustache": "4.2.0",
     "parse": "3.1.0",
     "pg-monitor": "1.4.1",
     "pg-promise": "10.9.2",