diff --git a/package-lock.json b/package-lock.json
index db28dc4109..384ff7951c 100644
--- a/package-lock.json
+++ b/package-lock.json
@@ -9642,6 +9642,7 @@
       "version": "3.5.7",
       "resolved": "https://registry.npmjs.org/mongodb/-/mongodb-3.5.7.tgz",
       "integrity": "sha512-lMtleRT+vIgY/JhhTn1nyGwnSMmJkJELp+4ZbrjctrnBxuLbj6rmLuJFz8W2xUzUqWmqoyVxJLYuC58ZKpcTYQ==",
+      "dev": true,
       "requires": {
         "bl": "^2.2.0",
         "bson": "^1.1.4",
@@ -9655,6 +9656,7 @@
           "version": "2.2.0",
           "resolved": "https://registry.npmjs.org/bl/-/bl-2.2.0.tgz",
           "integrity": "sha512-wbgvOpqopSr7uq6fJrLH8EsvYMJf9gzfo2jCsL2eTy75qXPukA4pCgHamOQkZtY5vmfVtjB+P3LNlMHW5CEZXA==",
+          "dev": true,
           "requires": {
             "readable-stream": "^2.3.5",
             "safe-buffer": "^5.1.1"
@@ -9663,13 +9665,13 @@
       }
     },
     "mongoose": {
-      "version": "5.9.16",
-      "resolved": "https://registry.npmjs.org/mongoose/-/mongoose-5.9.16.tgz",
-      "integrity": "sha512-b4HNndgh+dacoLE/2SBF3iBBofeaKL+aGVZH7jnPRc2RXRCplX4sfH5sgoz03ryCSXJ+RQNIfqKAADt/ZBzPDA==",
+      "version": "5.9.18",
+      "resolved": "https://registry.npmjs.org/mongoose/-/mongoose-5.9.18.tgz",
+      "integrity": "sha512-agZbIuQcN1gZ12BJn6KesA+bgsvoLVjCwhfPw88hggxX8O24SWK4EJwN35GEZKDej9AHUZKNAPgmdeXCVQxviA==",
       "requires": {
         "bson": "^1.1.4",
         "kareem": "2.3.1",
-        "mongodb": "3.5.7",
+        "mongodb": "3.5.8",
         "mongoose-legacy-pluralize": "1.0.2",
         "mpath": "0.7.0",
         "mquery": "3.2.2",
@@ -9678,6 +9680,30 @@
         "safe-buffer": "5.1.2",
         "sift": "7.0.1",
         "sliced": "1.0.1"
+      },
+      "dependencies": {
+        "bl": {
+          "version": "2.2.0",
+          "resolved": "https://registry.npmjs.org/bl/-/bl-2.2.0.tgz",
+          "integrity": "sha512-wbgvOpqopSr7uq6fJrLH8EsvYMJf9gzfo2jCsL2eTy75qXPukA4pCgHamOQkZtY5vmfVtjB+P3LNlMHW5CEZXA==",
+          "requires": {
+            "readable-stream": "^2.3.5",
+            "safe-buffer": "^5.1.1"
+          }
+        },
+        "mongodb": {
+          "version": "3.5.8",
+          "resolved": "https://registry.npmjs.org/mongodb/-/mongodb-3.5.8.tgz",
+          "integrity": "sha512-jz7mR58z66JKL8Px4ZY+FXbgB7d0a0hEGCT7kw8iye46/gsqPrOEpZOswwJ2BQlfzsrCLKdsF9UcaUfGVN2HrQ==",
+          "requires": {
+            "bl": "^2.2.0",
+            "bson": "^1.1.4",
+            "denque": "^1.4.1",
+            "require_optional": "^1.0.1",
+            "safe-buffer": "^5.1.2",
+            "saslprep": "^1.0.0"
+          }
+        }
       }
     },
     "mongoose-legacy-pluralize": {
diff --git a/package.json b/package.json
index 5026265d5c..b43ae7736c 100644
--- a/package.json
+++ b/package.json
@@ -48,7 +48,7 @@
     "method-override": "^3.0.0",
     "moment": "^2.26.0",
     "moment-recur": "^1.0.7",
-    "mongoose": "^5.9.16",
+    "mongoose": "^5.9.18",
     "morgan": "^1.10.0",
     "nconf": "^0.10.0",
     "node-gcm": "^1.0.2",