diff --git a/apis/userprofile/package-lock.json b/apis/userprofile/package-lock.json
index 4e5e572..60a16e5 100644
--- a/apis/userprofile/package-lock.json
+++ b/apis/userprofile/package-lock.json
@@ -1415,9 +1415,9 @@
             "dev": true
         },
         "js-yaml": {
-            "version": "3.12.0",
-            "resolved": "https://registry.npmjs.org/js-yaml/-/js-yaml-3.12.0.tgz",
-            "integrity": "sha512-PIt2cnwmPfL4hKNwqeiuz4bKfnzHTBv6HyVgjahA6mPLwPDzjDWrplJBMjHUFxku/N3FlmrbyPclad+I+4mJ3A==",
+            "version": "3.13.1",
+            "resolved": "https://registry.npmjs.org/js-yaml/-/js-yaml-3.13.1.tgz",
+            "integrity": "sha512-YfbcO7jXDdyj0DGxYVSlSeQNHbD7XPWvrVWeVUujrQEoZzWJIRrCPoyk6kL6IAjAG2IolMK4T0hNUe0HOUs5Jw==",
             "requires": {
                 "argparse": "^1.0.7",
                 "esprima": "^4.0.0"
diff --git a/apis/userprofile/package.json b/apis/userprofile/package.json
index 6703e1f..b831bb7 100644
--- a/apis/userprofile/package.json
+++ b/apis/userprofile/package.json
@@ -20,7 +20,7 @@
     "devDependencies": {
         "eslint": "^5",
         "is-my-json-valid": "^2.17.2",
-        "js-yaml": "^3.12.0",
+        "js-yaml": "^3.13.1",
         "nyc": "^13.0.1",
         "supertest": "^3.1.0",
         "swagger-parser": "^4.1.0",