diff --git a/package-lock.json b/package-lock.json
index b4c3445ff..52ed62729 100644
--- a/package-lock.json
+++ b/package-lock.json
@@ -5320,15 +5320,15 @@
       }
     },
     "mongoose": {
-      "version": "5.9.7",
-      "resolved": "https://registry.npmjs.org/mongoose/-/mongoose-5.9.7.tgz",
-      "integrity": "sha512-WJOBh9WMvivqBK8my9HFtSzSySKdUxJPNGAwswEakAasWUcPXJl3yHMtZ4ngGnKbwTT9KnAr75xamlt/PouR9w==",
+      "version": "5.9.9",
+      "resolved": "https://registry.npmjs.org/mongoose/-/mongoose-5.9.9.tgz",
+      "integrity": "sha512-pLkIkM7XQwfbQ+xK1l57Zv0DYPH190/I6Cv5+PbJGfAU0HvX0atMlp+vly8zcjNTEvTkVM80qA5eBYBvZyLYXw==",
       "requires": {
         "bson": "~1.1.1",
         "kareem": "2.3.1",
         "mongodb": "3.5.5",
         "mongoose-legacy-pluralize": "1.0.2",
-        "mpath": "0.6.0",
+        "mpath": "0.7.0",
         "mquery": "3.2.2",
         "ms": "2.1.2",
         "regexp-clone": "1.0.0",
@@ -5355,9 +5355,9 @@
       "integrity": "sha512-Yo/7qQU4/EyIS8YDFSeenIvXxZN+ld7YdV9LqFVQJzTLye8unujAWPZ4NWKfFA+RNjh+wvTWKY9Z3E5XM6ZZiQ=="
     },
     "mpath": {
-      "version": "0.6.0",
-      "resolved": "https://registry.npmjs.org/mpath/-/mpath-0.6.0.tgz",
-      "integrity": "sha512-i75qh79MJ5Xo/sbhxrDrPSEG0H/mr1kcZXJ8dH6URU5jD/knFxCVqVC/gVSW7GIXL/9hHWlT9haLbCXWOll3qw=="
+      "version": "0.7.0",
+      "resolved": "https://registry.npmjs.org/mpath/-/mpath-0.7.0.tgz",
+      "integrity": "sha512-Aiq04hILxhz1L+f7sjGyn7IxYzWm1zLNNXcfhDtx04kZ2Gk7uvFdgZ8ts1cWa/6d0TQmag2yR8zSGZUmp0tFNg=="
     },
     "mquery": {
       "version": "3.2.2",
diff --git a/package.json b/package.json
index 3400d6483..7590292a2 100644
--- a/package.json
+++ b/package.json
@@ -48,7 +48,7 @@
     "lodash": "^4.17.15",
     "marked": "^0.3.19",
     "moment": "^2.24.0",
-    "mongoose": "^5.9.7",
+    "mongoose": "^5.9.9",
     "nconf": "^0.10.0",
     "pico-router": "^2.1.0",
     "react": "^16.13.1",