diff --git a/package.json b/package.json
index 42a5634..dbb0ba1 100644
--- a/package.json
+++ b/package.json
@@ -17,7 +17,7 @@
     "express": "^4.16.2",
     "fs": "^0.0.1-security",
     "jsonwebtoken": "^8.1.0",
-    "mongoose": "^4.13.4",
+    "mongoose": "^4.13.21",
     "nodemailer": "^4.4.1",
     "nodemailer-express-handlebars": "^2.0.0",
     "path": "^0.12.7"
diff --git a/yarn.lock b/yarn.lock
index 47d5b62..eddfc4a 100644
--- a/yarn.lock
+++ b/yarn.lock
@@ -508,10 +508,10 @@ mongodb@2.2.34:
     mongodb-core "2.1.18"
     readable-stream "2.2.7"
 
-mongoose@^4.13.4:
-  version "4.13.19"
-  resolved "https://registry.yarnpkg.com/mongoose/-/mongoose-4.13.19.tgz#58fd2d7dcc02985035ec65a52c99df9078485065"
-  integrity sha512-O41XmkbAZtLK6Uw4cqjI30s0sP8oZeG+aWweOIyE2VYHMQiYDWhVkBMtsv+Kv8chDizaBhO5oErTHexLQKzU+w==
+mongoose@^4.13.21:
+  version "4.13.21"
+  resolved "https://registry.yarnpkg.com/mongoose/-/mongoose-4.13.21.tgz#83f4a8461b19aca1b2274feaaaf262b71b6f034d"
+  integrity sha512-0VZtQu1rSUPwUtbb7zh6CymI0nNkVInOIDbtWNlna070qnUO14On8PpSVSwlx3gwmkKL2OkP4ioCj5YHC6trMg==
   dependencies:
     async "2.6.0"
     bson "~1.0.4"