diff --git a/package-lock.json b/package-lock.json
index 49f455a..0c46b45 100644
--- a/package-lock.json
+++ b/package-lock.json
@@ -328,9 +328,9 @@
       "integrity": "sha1-WQxhFWsK4vTwJVcyoViyZrxWsh0="
     },
     "ejs": {
-      "version": "2.7.4",
-      "resolved": "https://registry.npmjs.org/ejs/-/ejs-2.7.4.tgz",
-      "integrity": "sha512-7vmuyh5+kuUyJKePhQfRQBhXV5Ce+RnaeeQArKu1EAMpL3WbgMt5WG6uQZpEVvYSSsxMXRKOewtDk9RaTKXRlA=="
+      "version": "3.0.1",
+      "resolved": "https://registry.npmjs.org/ejs/-/ejs-3.0.1.tgz",
+      "integrity": "sha512-cuIMtJwxvzumSAkqaaoGY/L6Fc/t6YvoP9/VIaK0V/CyqKLEQ8sqODmYfy/cjXEdZ9+OOL8TecbJu+1RsofGDw=="
     },
     "encodeurl": {
       "version": "1.0.2",
diff --git a/package.json b/package.json
index cedded1..0b13316 100644
--- a/package.json
+++ b/package.json
@@ -11,7 +11,7 @@
     "consign": "^0.1.6",
     "cookie-parser": "~1.4.4",
     "debug": "~2.6.9",
-    "ejs": "^2.5.5",
+    "ejs": "^3.0.1",
     "express": "~4.16.1",
     "express-session": "^1.17.0",
     "http-errors": "~1.6.3",