diff --git a/package-lock.json b/package-lock.json
index 3c1ffa7..11af1da 100644
--- a/package-lock.json
+++ b/package-lock.json
@@ -1022,9 +1022,9 @@
       }
     },
     "ejs": {
-      "version": "2.6.2",
-      "resolved": "https://registry.npmjs.org/ejs/-/ejs-2.6.2.tgz",
-      "integrity": "sha512-PcW2a0tyTuPHz3tWyYqtK6r1fZ3gp+3Sop8Ph+ZYN81Ob5rwmbHEzaqs10N3BEsaGTkh/ooniXK+WwszGlc2+Q=="
+      "version": "2.7.4",
+      "resolved": "https://registry.npmjs.org/ejs/-/ejs-2.7.4.tgz",
+      "integrity": "sha512-7vmuyh5+kuUyJKePhQfRQBhXV5Ce+RnaeeQArKu1EAMpL3WbgMt5WG6uQZpEVvYSSsxMXRKOewtDk9RaTKXRlA=="
     },
     "emoji-regex": {
       "version": "7.0.3",
diff --git a/package.json b/package.json
index da6f36d..6a9c1d9 100644
--- a/package.json
+++ b/package.json
@@ -15,7 +15,7 @@
     "blueimp-tmpl": "^3.7.0",
     "coffeekup": "^0.3.1",
     "ect": "^1.0.0",
-    "ejs": "^2.5.5",
+    "ejs": "^2.7.4",
     "fest": "^0.12.1",
     "gaikan": "^2.0.2",
     "handlebars": "^4.7.3",