diff --git a/graphql-with-react/auth-graphql/yarn.lock b/graphql-with-react/auth-graphql/yarn.lock
index 25ed098..93f1a95 100644
--- a/graphql-with-react/auth-graphql/yarn.lock
+++ b/graphql-with-react/auth-graphql/yarn.lock
@@ -1011,8 +1011,8 @@ bson@^1.1.4:
   resolved "https://registry.yarnpkg.com/bson/-/bson-1.1.6.tgz#fb819be9a60cd677e0853aee4ca712a785d6618a"
 
 bson@~1.0.4:
-  version "1.0.4"
-  resolved "https://registry.yarnpkg.com/bson/-/bson-1.0.4.tgz#93c10d39eaa5b58415cbc4052f3e53e562b0b72c"
+  version "1.0.9"
+  resolved "https://registry.yarnpkg.com/bson/-/bson-1.0.9.tgz#12319f8323b1254739b7c6bef8d3e89ae05a2f57"
 
 buffer-shims@^1.0.0:
   version "1.0.0"