diff --git a/package-lock.json b/package-lock.json
index 63416010..2b5e2387 100644
--- a/package-lock.json
+++ b/package-lock.json
@@ -529,9 +529,9 @@
       }
     },
     "commander": {
-      "version": "7.1.0",
-      "resolved": "https://registry.npmjs.org/commander/-/commander-7.1.0.tgz",
-      "integrity": "sha512-pRxBna3MJe6HKnBGsDyMv8ETbptw3axEdYHoqNh7gu5oDcew8fs0xnivZGm06Ogk8zGAJ9VX+OPEr2GXEQK4dg=="
+      "version": "7.2.0",
+      "resolved": "https://registry.npmjs.org/commander/-/commander-7.2.0.tgz",
+      "integrity": "sha512-QrWXB+ZQSVPmIWIhtEO9H+gwHaMGYiF5ChvoJ+K9ZGHG/sVsa6yiesAD1GC/x46sET00Xlwo1u49RVVVzvcSkw=="
     },
     "commondir": {
       "version": "1.0.1",
diff --git a/package.json b/package.json
index 05285cde..4b56c883 100644
--- a/package.json
+++ b/package.json
@@ -9,7 +9,7 @@
     "url": "https://github.com/jupyterhub/configurable-http-proxy.git"
   },
   "dependencies": {
-    "commander": "~7.1.0",
+    "commander": "~7.2.0",
     "configurable-http-proxy-redis-backend": "^0.1.6",
     "http-proxy": "^1.18.1",
     "lynx": "^0.2.0",