diff --git a/package.json b/package.json
index a5c4816f4..335dddbb3 100644
--- a/package.json
+++ b/package.json
@@ -24,7 +24,7 @@
         }
     ],
     "dependencies": {
-        "ajv": "6.10.2",
+        "ajv": "6.12.0",
         "basic-auth": "2.0.1",
         "bcryptjs": "2.4.3",
         "body-parser": "1.19.0",
@@ -34,7 +34,7 @@
         "cookie": "0.4.0",
         "cookie-parser": "1.4.4",
         "cors": "2.8.5",
-        "cron": "1.7.2",
+        "cron": "1.8.2",
         "denque": "1.4.1",
         "express": "4.17.1",
         "express-session": "1.17.0",
@@ -43,33 +43,33 @@
         "hash-sum": "2.0.0",
         "https-proxy-agent": "5.0.0",
         "i18next": "15.1.2",
-        "iconv-lite": "0.5.0",
+        "iconv-lite": "0.5.1",
         "is-utf8": "0.2.1",
         "js-yaml": "3.13.1",
         "json-stringify-safe": "5.0.1",
         "jsonata": "1.8.1",
         "media-typer": "1.1.0",
-        "memorystore": "1.6.1",
+        "memorystore": "1.6.2",
         "mime": "2.4.4",
         "mqtt": "2.18.8",
         "multer": "1.4.2",
-        "mustache": "3.0.2",
+        "mustache": "4.0.0",
         "node-red-node-rbe": "^0.2.6",
         "node-red-node-sentiment": "^0.1.6",
         "node-red-node-tail": "^0.1.0",
         "nopt": "4.0.1",
         "oauth2orize": "1.11.0",
         "on-headers": "1.0.2",
-        "passport": "0.4.0",
+        "passport": "0.4.1",
         "passport-http-bearer": "1.0.1",
         "passport-oauth2-client-password": "0.1.2",
         "raw-body": "2.4.1",
         "request": "2.88.0",
         "semver": "6.3.0",
-        "uglify-js": "3.6.9",
+        "uglify-js": "3.8.0",
         "when": "3.7.8",
         "ws": "6.2.1",
-        "xml2js": "0.4.22"
+        "xml2js": "0.4.23"
     },
     "optionalDependencies": {
         "bcrypt": "3.0.6"
@@ -104,7 +104,7 @@
         "mocha": "^5.2.0",
         "mosca": "^2.8.3",
         "node-red-node-test-helper": "^0.2.3",
-        "node-sass": "^4.13.0",
+        "node-sass": "^4.13.1",
         "should": "^8.4.0",
         "sinon": "1.17.7",
         "stoppable": "^1.1.0",
diff --git a/packages/node_modules/@node-red/editor-api/package.json b/packages/node_modules/@node-red/editor-api/package.json
index 824f4df5b..81be91b6d 100644
--- a/packages/node_modules/@node-red/editor-api/package.json
+++ b/packages/node_modules/@node-red/editor-api/package.json
@@ -24,13 +24,13 @@
         "cors": "2.8.5",
         "express-session": "1.17.0",
         "express": "4.17.1",
-        "memorystore": "1.6.1",
+        "memorystore": "1.6.2",
         "mime": "2.4.4",
-        "mustache": "3.0.2",
+        "mustache": "4.0.0",
         "oauth2orize": "1.11.0",
         "passport-http-bearer": "1.0.1",
         "passport-oauth2-client-password": "0.1.2",
-        "passport": "0.4.0",
+        "passport": "0.4.1",
         "when": "3.7.8",
         "ws": "6.2.1"
     },
diff --git a/packages/node_modules/@node-red/nodes/package.json b/packages/node_modules/@node-red/nodes/package.json
index ca4e26626..1b707b95b 100644
--- a/packages/node_modules/@node-red/nodes/package.json
+++ b/packages/node_modules/@node-red/nodes/package.json
@@ -15,14 +15,14 @@
         }
     ],
     "dependencies": {
-        "ajv": "6.10.2",
+        "ajv": "6.12.0",
         "body-parser": "1.19.0",
         "cheerio": "0.22.0",
         "content-type": "1.0.4",
         "cookie-parser": "1.4.4",
         "cookie": "0.4.0",
         "cors": "2.8.5",
-        "cron": "1.7.2",
+        "cron": "1.8.2",
         "denque": "1.4.1",
         "fs-extra": "8.1.0",
         "fs.notify": "0.0.4",
@@ -33,12 +33,12 @@
         "media-typer": "1.1.0",
         "mqtt": "2.18.8",
         "multer": "1.4.2",
-        "mustache": "3.0.2",
+        "mustache": "4.0.0",
         "on-headers": "1.0.2",
         "raw-body": "2.4.1",
         "request": "2.88.0",
         "ws": "6.2.1",
-        "xml2js": "0.4.22",
-        "iconv-lite": "0.5.0"
+        "xml2js": "0.4.23",
+        "iconv-lite": "0.5.1"
     }
 }
diff --git a/packages/node_modules/@node-red/registry/package.json b/packages/node_modules/@node-red/registry/package.json
index fefb24360..c1ee06050 100644
--- a/packages/node_modules/@node-red/registry/package.json
+++ b/packages/node_modules/@node-red/registry/package.json
@@ -18,7 +18,7 @@
     "dependencies": {
         "@node-red/util": "1.0.3",
         "semver": "6.3.0",
-        "uglify-js": "3.6.9",
+        "uglify-js": "3.8.0",
         "when": "3.7.8"
     }
 }