diff --git a/package.json b/package.json
index df7293e..59644c6 100644
--- a/package.json
+++ b/package.json
@@ -53,7 +53,7 @@
     "json2csv": "^3.7.2",
     "libxmljs": "^0.18.4",
     "mkdirp": "^0.5.1",
-    "moment": "^2.21.0",
+    "moment": "^2.29.4",
     "morgan": "^1.6.1",
     "multiparty": "^4.1.2",
     "mv": "^2.1.1",
diff --git a/yarn.lock b/yarn.lock
index ef2f43e..6f1d21e 100644
--- a/yarn.lock
+++ b/yarn.lock
@@ -1724,9 +1724,9 @@ mkdirp@^0.5.0, mkdirp@^0.5.1, mkdirp@~0.5.0, mkdirp@~0.5.1:
   dependencies:
     minimist "0.0.8"
 
-moment@^2.21.0:
-  version "2.22.2"
-  resolved "https://registry.yarnpkg.com/moment/-/moment-2.22.2.tgz#3c257f9839fc0e93ff53149632239eb90783ff66"
+moment@^2.29.4:
+  version "2.29.4"
+  resolved "https://registry.yarnpkg.com/moment/-/moment-2.29.4.tgz#3dbe052889fe7c1b2ed966fcb3a77328964ef108"
 
 morgan@^1.6.1:
   version "1.9.0"
@@ -1918,7 +1918,7 @@ once@^1.3.0, once@^1.4.0:
 
 onetime@^1.0.0:
   version "1.1.0"
-  resolved "http://registry.npmjs.org/onetime/-/onetime-1.1.0.tgz#a1f7838f8314c516f05ecefcbc4ccfe04b4ed789"
+  resolved "https://registry.npmjs.org/onetime/-/onetime-1.1.0.tgz#a1f7838f8314c516f05ecefcbc4ccfe04b4ed789"
 
 openrosa-form-submission-middleware@^1.0.4:
   version "1.1.0"