diff --git a/_api-reference-generator/package-lock.json b/_api-reference-generator/package-lock.json
index d63e5a15..62dbd00b 100644
--- a/_api-reference-generator/package-lock.json
+++ b/_api-reference-generator/package-lock.json
@@ -674,9 +674,9 @@
       "integrity": "sha1-8S4PPF13sLHN2RRpQuTpbB5N1SU="
     },
     "async": {
-      "version": "2.6.3",
-      "resolved": "https://registry.npmjs.org/async/-/async-2.6.3.tgz",
-      "integrity": "sha512-zflvls11DCy+dQWzTW2dzuilv8Z5X/pjfmZOWba6TNIVDm+2UDaJmXSOXlasHKfNBs8oo3M0aT50fDEWfKZjXg==",
+      "version": "2.6.4",
+      "resolved": "https://registry.npmjs.org/async/-/async-2.6.4.tgz",
+      "integrity": "sha512-mzo5dfJYwAn29PeiJ0zvwTo04zj8HDJj0Mn8TD7sno7q12prdbnasKJHhkm2c1LgrhlJ0teaea8860oxi51mGA==",
       "requires": {
         "lodash": "^4.17.14"
       }
diff --git a/_api-reference-generator/package.json b/_api-reference-generator/package.json
index acc4a648..6ca3c80d 100644
--- a/_api-reference-generator/package.json
+++ b/_api-reference-generator/package.json
@@ -11,7 +11,7 @@
   "license": "MIT",
   "dependencies": {
     "apostrophe": "^2.220.7",
-    "async": "^2.6.3",
+    "async": "^2.6.4",
     "boring": "^0.1.0",
     "glob": "^7.2.0",
     "js-tokenizer": "^1.3.3",