diff --git a/src/package-lock.json b/src/package-lock.json
index f58728314..5c4b4b14d 100644
--- a/src/package-lock.json
+++ b/src/package-lock.json
@@ -3181,9 +3181,9 @@
       }
     },
     "log4js": {
-      "version": "0.6.35",
-      "resolved": "https://registry.npmjs.org/log4js/-/log4js-0.6.35.tgz",
-      "integrity": "sha1-OrHafLFII7dO04ZcSFk6zfEfG1k=",
+      "version": "0.6.38",
+      "resolved": "https://registry.npmjs.org/log4js/-/log4js-0.6.38.tgz",
+      "integrity": "sha1-LElBFmldb7JUgJQ9P8hy5mKlIv0=",
       "requires": {
         "readable-stream": "~1.0.2",
         "semver": "~4.3.3"
diff --git a/src/package.json b/src/package.json
index adef338fb..324c46215 100644
--- a/src/package.json
+++ b/src/package.json
@@ -50,7 +50,7 @@
     "jsonminify": "0.4.1",
     "languages4translatewiki": "0.1.3",
     "lodash.clonedeep": "4.5.0",
-    "log4js": "0.6.35",
+    "log4js": "0.6.38",
     "measured-core": "1.51.1",
     "mime-types": "^2.1.27",
     "nodeify": "1.0.1",