diff --git a/package-lock.json b/package-lock.json
index 4877a03..2532095 100644
--- a/package-lock.json
+++ b/package-lock.json
@@ -7728,9 +7728,9 @@
       "dev": true
     },
     "three": {
-      "version": "0.117.1",
-      "resolved": "https://registry.npmjs.org/three/-/three-0.117.1.tgz",
-      "integrity": "sha512-t4zeJhlNzUIj9+ub0l6nICVimSuRTZJOqvk3Rmlu+YGdTOJ49Wna8p7aumpkXJakJfITiybfpYE1XN1o1Z34UQ=="
+      "version": "0.137.0",
+      "resolved": "https://registry.npmjs.org/three/-/three-0.137.0.tgz",
+      "integrity": "sha512-rzSDhia6cU35UCy6y+zEEws6vSgytfHqFMSaBvUcySgzwvDO6vETyswtSNi/+aVqJw8WLMwyT1mlQQ1T/dxxOA=="
     },
     "through": {
       "version": "2.3.8",
diff --git a/package.json b/package.json
index d637d4a..1a78f50 100644
--- a/package.json
+++ b/package.json
@@ -18,7 +18,7 @@
   },
   "homepage": "https://github.com/Zetaphor/webxr-controller-helper#readme",
   "dependencies": {
-    "three": "^0.117.1"
+    "three": "^0.137.0"
   },
   "devDependencies": {
     "@babel/core": "^7.7.4",