diff --git a/package-lock.json b/package-lock.json
index 038766f468..5b16cea842 100644
--- a/package-lock.json
+++ b/package-lock.json
@@ -3623,9 +3623,9 @@
       }
     },
     "commander": {
-      "version": "3.0.2",
-      "resolved": "https://registry.npmjs.org/commander/-/commander-3.0.2.tgz",
-      "integrity": "sha512-Gar0ASD4BDyKC4hl4DwHqDrmvjoxWKZigVnAbn5H1owvm4CxCPdb0HQDehwNYMJpla5+M2tPmPARzhtYuwpHow=="
+      "version": "4.0.0",
+      "resolved": "https://registry.npmjs.org/commander/-/commander-4.0.0.tgz",
+      "integrity": "sha512-SEa2abMBTZuEjLVYpNrAFoRgxPwG4rXP3+SGY6CM/HZGeDzIA7Pzp+7H3AHDukKEpyy2SoSGGPShKqqfH9T9AQ=="
     },
     "commondir": {
       "version": "1.0.1",
@@ -10361,7 +10361,6 @@
         "bcrypt": "3.0.6",
         "bcryptjs": "2.4.3",
         "body-parser": "1.19.0",
-        "commander": "3.0.2",
         "cors": "2.8.5",
         "deepcopy": "2.0.0",
         "express": "4.17.1",
diff --git a/package.json b/package.json
index 70dc244888..5b474bfb2d 100644
--- a/package.json
+++ b/package.json
@@ -38,7 +38,7 @@
     "bcryptjs": "2.3.0",
     "body-parser": "1.19.0",
     "codemirror-graphql": "github:timsuchanek/codemirror-graphql#details-fix",
-    "commander": "3.0.2",
+    "commander": "4.0.0",
     "connect-flash": "0.1.1",
     "cookie-session": "2.0.0-beta.3",
     "copy-to-clipboard": "^3.2.0",