diff --git a/packages/node_modules/@node-red/editor-api/package.json b/packages/node_modules/@node-red/editor-api/package.json
index c41f1ae95..241cc8785 100644
--- a/packages/node_modules/@node-red/editor-api/package.json
+++ b/packages/node_modules/@node-red/editor-api/package.json
@@ -19,7 +19,7 @@
         "clone": "2.1.2",
         "cors": "2.8.4",
         "express-session": "1.15.6",
-        "express": "4.16.3",
+        "express": "4.16.4",
         "memorystore": "1.6.0",
         "mime": "1.4.1",
         "mustache": "2.3.2",
diff --git a/packages/node_modules/@node-red/nodes/package.json b/packages/node_modules/@node-red/nodes/package.json
index 907cdc064..495b80841 100644
--- a/packages/node_modules/@node-red/nodes/package.json
+++ b/packages/node_modules/@node-red/nodes/package.json
@@ -11,13 +11,13 @@
         { "name": "Dave Conway-Jones"}
     ],
     "dependencies": {
-        "ajv": "6.5.3",
+        "ajv": "6.5.4",
         "body-parser": "1.18.3",
         "cheerio": "0.22.0",
         "cookie-parser": "1.4.3",
         "cookie": "0.3.1",
         "cors": "2.8.4",
-        "cron": "1.4.1",
+        "cron": "1.5.0",
         "denque": "1.3.0",
         "fs-extra": "5.0.0",
         "fs.notify": "0.0.4",
@@ -27,7 +27,7 @@
         "js-yaml": "3.12.0",
         "media-typer": "0.3.0",
         "mqtt": "2.18.8",
-        "multer": "1.3.1",
+        "multer": "1.4.1",
         "mustache": "2.3.2",
         "on-headers": "1.0.1",
         "raw-body": "2.3.3",
diff --git a/packages/node_modules/@node-red/registry/package.json b/packages/node_modules/@node-red/registry/package.json
index ea2c56b84..311d4c344 100644
--- a/packages/node_modules/@node-red/registry/package.json
+++ b/packages/node_modules/@node-red/registry/package.json
@@ -13,7 +13,7 @@
     ],
     "dependencies": {
         "@node-red/util": "*",
-        "semver": "5.5.1",
+        "semver": "5.6.0",
         "uglify-js": "3.4.9",
         "when": "3.7.8"
     }
diff --git a/packages/node_modules/@node-red/runtime/package.json b/packages/node_modules/@node-red/runtime/package.json
index 127a0ed1d..99a303345 100644
--- a/packages/node_modules/@node-red/runtime/package.json
+++ b/packages/node_modules/@node-red/runtime/package.json
@@ -15,7 +15,7 @@
         "@node-red/registry": "*",
         "@node-red/util": "*",
         "clone": "2.1.2",
-        "express": "4.16.3",
+        "express": "4.16.4",
         "fs-extra": "5.0.0",
         "json-stringify-safe": "5.0.1",
         "when": "3.7.8"
diff --git a/packages/node_modules/node-red/package.json b/packages/node_modules/node-red/package.json
index c6c7eeee8..27785bf2d 100644
--- a/packages/node_modules/node-red/package.json
+++ b/packages/node_modules/node-red/package.json
@@ -30,16 +30,16 @@
         "@node-red/editor-api": "0.20.0-alpha.0",
         "@node-red/runtime": "0.20.0-alpha.0",
         "@node-red/util": "0.20.0-alpha.0",
-        "basic-auth": "2.0.0",
+        "basic-auth": "2.0.1",
         "bcryptjs": "2.4.3",
-        "express": "4.16.3",
+        "express": "4.16.4",
         "fs-extra": "5.0.0",
         "node-red-node-email": "0.1.*",
         "node-red-node-feedparser": "^0.1.12",
         "node-red-node-rbe": "0.2.*",
         "node-red-node-twitter": "^1.1.0",
         "nopt": "4.0.1",
-        "semver": "5.5.1"
+        "semver": "5.6.0"
     },
     "optionalDependencies": {
         "bcrypt": "~2.0.0"