diff --git a/package-lock.json b/package-lock.json
index 56e9b40d..9bdd0ae3 100644
--- a/package-lock.json
+++ b/package-lock.json
@@ -10812,9 +10812,9 @@
       "integrity": "sha1-fjL3W0E4EpHQRhHxvxQQmsAGUdc="
     },
     "qs": {
-      "version": "6.9.1",
-      "resolved": "https://registry.npmjs.org/qs/-/qs-6.9.1.tgz",
-      "integrity": "sha512-Cxm7/SS/y/Z3MHWSxXb8lIFqgqBowP5JMlTUFyJN88y0SGQhVmZnqFK/PeuMX9LzUyWsqqhNxIyg0jlzq946yA=="
+      "version": "6.9.7",
+      "resolved": "https://registry.npmjs.org/qs/-/qs-6.9.7.tgz",
+      "integrity": "sha512-IhMFgUmuNpyRfxA90umL7ByLlgRXu6tIfKPpF5TmcfRLlLCckfP/g3IQmju6jjpu+Hh8rA+2p6A27ZSPOOHdKw=="
     },
     "querystring": {
       "version": "0.2.0",
diff --git a/package.json b/package.json
index bbd1b6eb..7f510163 100644
--- a/package.json
+++ b/package.json
@@ -51,7 +51,7 @@
     "passport-saml": "^0.33.0",
     "pug": "^2.0.3",
     "q": "^1.5.1",
-    "qs": "^6.5.2",
+    "qs": "^6.9.7",
     "seedrandom": "^3.0.1",
     "serve-favicon": "^2.5.0",
     "statsd-client": "^0.4.2",