diff --git a/package.json b/package.json
index 01765d3..c24a783 100644
--- a/package.json
+++ b/package.json
@@ -20,7 +20,7 @@
     "redis": "^2.8.0",
     "socket.io": "^2.1.1",
     "uuid": "^3.3.2",
-    "vm2": "^3.6.4",
+    "vm2": "^3.9.4",
     "concurrently": "^3.5.0",
     "@babel/preset-env": "7.8.3",
     "@babel/core": "7.8.3",
diff --git a/yarn.lock b/yarn.lock
index e9236c9..ce1d3d6 100644
--- a/yarn.lock
+++ b/yarn.lock
@@ -6008,10 +6008,10 @@ verror@1.10.0:
     core-util-is "1.0.2"
     extsprintf "^1.2.0"
 
-vm2@^3.6.4:
-  version "3.6.4"
-  resolved "https://registry.yarnpkg.com/vm2/-/vm2-3.6.4.tgz#88b27a9f328a0630671841363692a57d24dead33"
-  integrity sha512-LFj8YL9DyGn+fwgG2J+10HyuIpdIRHHN8/3NwKoc2e2t2Pr0aXV/2OSODceDR7NP7VNr8RTqmxHRYcwbNvpbwg==
+vm2@^3.9.4:
+  version "3.9.4"
+  resolved "https://registry.yarnpkg.com/vm2/-/vm2-3.9.4.tgz#2e118290fefe7bd8ea09ebe2f5faf53730dbddaa"
+  integrity sha512-sOdharrJ7KEePIpHekiWaY1DwgueuiBeX/ZBJUPgETsVlJsXuEx0K0/naATq2haFvJrvZnRiORQRubR0b7Ye6g==
 
 wcwidth@^1.0.0:
   version "1.0.1"