diff --git a/package-lock.json b/package-lock.json
index 1ef99e891..ba9aebc5e 100644
--- a/package-lock.json
+++ b/package-lock.json
@@ -1151,9 +1151,9 @@
       "integrity": "sha1-Zec2NiyRsAghgJ70vIVnudl26qY="
     },
     "bluebird": {
-      "version": "3.5.2",
-      "resolved": "https://registry.npmjs.org/bluebird/-/bluebird-3.5.2.tgz",
-      "integrity": "sha512-dhHTWMI7kMx5whMQntl7Vr9C6BvV10lFXDAasnqnrMYhXVCzzk6IO9Fo2L75jXHT07WrOngL1WDXOp+yYS91Yg=="
+      "version": "3.7.2",
+      "resolved": "https://registry.npmjs.org/bluebird/-/bluebird-3.7.2.tgz",
+      "integrity": "sha512-XpNj6GDQzdfW+r2Wnn7xiSAd7TM3jzkxGXBGTtWKuSXv1xUV+azxAm8jdWZN06QTQk+2N2XB9jRDkvbmQmcRtg=="
     },
     "bmp-js": {
       "version": "0.0.3",
diff --git a/package.json b/package.json
index f5f4819f8..480274793 100644
--- a/package.json
+++ b/package.json
@@ -20,7 +20,7 @@
     "apostrophe-palette": "^2.0.17",
     "apostrophe-workflow": "^2.21.1",
     "basic-auth": "^2.0.1",
-    "bluebird": "^3.5.2",
+    "bluebird": "^3.7.2",
     "boring": "^0.1.0",
     "diff": ">=3.5.0",
     "dotenv": "^6.0.0",