diff --git a/package-lock.json b/package-lock.json
index cac338aa..a06d5407 100644
--- a/package-lock.json
+++ b/package-lock.json
@@ -14260,9 +14260,9 @@
       }
     },
     "ws": {
-      "version": "7.5.0",
-      "resolved": "https://registry.npmjs.org/ws/-/ws-7.5.0.tgz",
-      "integrity": "sha512-6ezXvzOZupqKj4jUqbQ9tXuJNo+BR2gU8fFRk3XCP3e0G6WT414u5ELe6Y0vtp7kmSJ3F7YWObSNr1ESsgi4vw=="
+      "version": "7.5.3",
+      "resolved": "https://registry.npmjs.org/ws/-/ws-7.5.3.tgz",
+      "integrity": "sha512-kQ/dHIzuLrS6Je9+uv81ueZomEwH0qVYstcAQ4/Z93K8zeko9gtAbttJWzoC5ukqXY1PpoouV3+VSOqEAFt5wg=="
     },
     "xml-name-validator": {
       "version": "3.0.0",
diff --git a/package.json b/package.json
index d1ecd4fa..5bfffbe1 100644
--- a/package.json
+++ b/package.json
@@ -46,7 +46,7 @@
     "it-pipe": "^1.1.0",
     "stream-to-it": "^0.2.3",
     "verror": "^1.10.0",
-    "ws": "^7.5.0"
+    "ws": "^7.5.3"
   },
   "devDependencies": {
     "@relaycorp/relaynet-testing": "^1.3.0",