diff --git a/packages/graphql-codegen-cli/package.json b/packages/graphql-codegen-cli/package.json
index ad3be2b63a0..6711a3ba0c1 100644
--- a/packages/graphql-codegen-cli/package.json
+++ b/packages/graphql-codegen-cli/package.json
@@ -68,7 +68,7 @@
     "inquirer": "6.2.2",
     "is-glob": "4.0.0",
     "is-valid-path": "0.1.1",
-    "js-yaml": "3.12.1",
+    "js-yaml": "3.12.2",
     "json-to-pretty-yaml": "1.2.2",
     "listr": "0.14.3",
     "listr-update-renderer": "0.5.0",
diff --git a/website/live-demo/package.json b/website/live-demo/package.json
index 25e6f81076a..600984ecb82 100644
--- a/website/live-demo/package.json
+++ b/website/live-demo/package.json
@@ -13,7 +13,7 @@
     "react-scripts-rewired": "2.1.3",
     "codemirror": "5.44.0",
     "codemirror-graphql": "0.8.3",
-    "js-yaml": "3.12.1",
+    "js-yaml": "3.12.2",
     "graphql-code-generator": "0.17.0",
     "graphql-codegen-flow": "0.17.0",
     "graphql-codegen-flow-documents": "0.17.0",
diff --git a/yarn.lock b/yarn.lock
index d8603273774..eb2143dcb30 100644
--- a/yarn.lock
+++ b/yarn.lock
@@ -7686,7 +7686,15 @@ js-tokens@^3.0.2:
   resolved "https://registry.yarnpkg.com/js-tokens/-/js-tokens-3.0.2.tgz#9866df395102130e38f7f996bceb65443209c25b"
   integrity sha1-mGbfOVECEw449/mWvOtlRDIJwls=
 
-js-yaml@3.12.1, js-yaml@^3.10.0, js-yaml@^3.12.0, js-yaml@^3.7.0, js-yaml@^3.9.0:
+js-yaml@3.12.2:
+  version "3.12.2"
+  resolved "https://registry.yarnpkg.com/js-yaml/-/js-yaml-3.12.2.tgz#ef1d067c5a9d9cb65bd72f285b5d8105c77f14fc"
+  integrity sha512-QHn/Lh/7HhZ/Twc7vJYQTkjuCa0kaCcDcjK5Zlk2rvnUpy7DxMJ23+Jc2dcyvltwQVg1nygAVlB2oRDFHoRS5Q==
+  dependencies:
+    argparse "^1.0.7"
+    esprima "^4.0.0"
+
+js-yaml@^3.10.0, js-yaml@^3.12.0, js-yaml@^3.7.0, js-yaml@^3.9.0:
   version "3.12.1"
   resolved "https://registry.yarnpkg.com/js-yaml/-/js-yaml-3.12.1.tgz#295c8632a18a23e054cf5c9d3cecafe678167600"
   integrity sha512-um46hB9wNOKlwkHgiuyEVAybXBjwFUV0Z/RaHJblRd9DXltue9FTYvzCr9ErQrK9Adz5MU4gHWVaNUfdmrC8qA==