diff --git a/package.json b/package.json
index 97768ae..d925e73 100644
--- a/package.json
+++ b/package.json
@@ -56,7 +56,7 @@
     "allow-methods": "^2.0.0",
     "cors": "^2.4.2",
     "object-assign": ">=1.0.0",
-    "urijs": "^1.19.2"
+    "urijs": "^1.19.8"
   },
   "devDependencies": {
     "chai": "^4.2.0",
diff --git a/yarn.lock b/yarn.lock
index 8688695..da23fbc 100644
--- a/yarn.lock
+++ b/yarn.lock
@@ -3506,10 +3506,10 @@ uri-js@^4.2.2:
   dependencies:
     punycode "^2.1.0"
 
-urijs@^1.19.2:
-  version "1.19.2"
-  resolved "https://registry.yarnpkg.com/urijs/-/urijs-1.19.2.tgz#f9be09f00c4c5134b7cb3cf475c1dd394526265a"
-  integrity sha512-s/UIq9ap4JPZ7H1EB5ULo/aOUbWqfDi7FKzMC2Nz+0Si8GiT1rIEaprt8hy3Vy2Ex2aJPpOQv4P4DuOZ+K1c6w==
+urijs@^1.19.8:
+  version "1.19.8"
+  resolved "https://registry.yarnpkg.com/urijs/-/urijs-1.19.8.tgz#ee0407a18528934d3c383e691912f47043a58feb"
+  integrity sha512-iIXHrjomQ0ZCuDRy44wRbyTZVnfVNLVo3Ksz1yxNyE5wV1IDZW2S5Jszy45DTlw/UdsnRT7DyDhIz7Gy+vJumw==
 
 util-deprecate@~1.0.1:
   version "1.0.2"