diff --git a/src/package.json b/src/package.json
index 47df2efa3..a8c8c6787 100644
--- a/src/package.json
+++ b/src/package.json
@@ -33,7 +33,7 @@
     "cheerio": "0.20.0",
     "clean-css": "3.4.19",
     "cookie-parser": "1.3.4",
-    "ejs": "2.5.7",
+    "ejs": "2.6.1",
     "etherpad-require-kernel": "1.0.9",
     "etherpad-yajsml": "0.0.2",
     "express": "4.16.4",