diff --git a/package-lock.json b/package-lock.json
index c9904ea44..58003d8a2 100644
--- a/package-lock.json
+++ b/package-lock.json
@@ -230,9 +230,9 @@
       "integrity": "sha1-p9BVi9icQveV3UIyj3QIMcpTvCU="
     },
     "commander": {
-      "version": "2.3.0",
-      "resolved": "https://registry.npmjs.org/commander/-/commander-2.3.0.tgz",
-      "integrity": "sha1-/UMOiJgy7DU7ms0d4hfBHLPu+HM="
+      "version": "2.20.3",
+      "resolved": "https://registry.npmjs.org/commander/-/commander-2.20.3.tgz",
+      "integrity": "sha512-GpVkmM8vF2vQUkj2LvZmD35JxeJOLCwJ9cUkugyk2nuhbv3+mJvpLYYt+0+USMxE+oj+ey/lJEnhZw75x/OMcQ=="
     },
     "comment-parser": {
       "version": "0.4.2",
diff --git a/package.json b/package.json
index 12cbab7f0..f3c7e8b6b 100644
--- a/package.json
+++ b/package.json
@@ -118,7 +118,7 @@
   "dependencies": {
     "ajv": "6.10.2",
     "async": "3.1.0",
-    "commander": "2.3.0",
+    "commander": "2.20.3",
     "js-yaml": "3.13.1",
     "lodash": "4.17.13",
     "oas-resolver": "2.2.5",