diff --git a/package-lock.json b/package-lock.json
index bfb37eaa..2f87cee8 100644
--- a/package-lock.json
+++ b/package-lock.json
@@ -4229,9 +4229,9 @@
       "dev": true
     },
     "esm": {
-      "version": "3.1.0",
-      "resolved": "https://registry.npmjs.org/esm/-/esm-3.1.0.tgz",
-      "integrity": "sha512-r4Go7Wh7Wh0WPinRXeeM9PIajRsUdt8SAyki5R1obVc0+BwtqvtjbngVSSdXg0jCe2xZkY8hyBMx6q/uymUkPw=="
+      "version": "3.1.4",
+      "resolved": "https://registry.npmjs.org/esm/-/esm-3.1.4.tgz",
+      "integrity": "sha512-GScwIz0110RTNzBmAQEdqaAYkD9zVhj2Jo+jeizjIcdyTw+C6S0Zv/dlPYgfF41hRTu2f1vQYliubzIkusx2gA=="
     },
     "espree": {
       "version": "4.0.0",
diff --git a/package.json b/package.json
index d702f1c5..478b1750 100644
--- a/package.json
+++ b/package.json
@@ -57,7 +57,7 @@
     "emoji-regex": "^7.0.3",
     "encoding": "^0.1.12",
     "escape-html": "^1.0.3",
-    "esm": "^3.1.0",
+    "esm": "^3.1.4",
     "events-light": "^1.0.5",
     "express": "^4.16.4",
     "file-api": "^0.10.4",