diff --git a/package-lock.json b/package-lock.json
index e7e9cabb..3bcd44bf 100644
--- a/package-lock.json
+++ b/package-lock.json
@@ -1,6 +1,6 @@
 {
   "name": "configurable-http-proxy",
-  "version": "4.2.2-dev",
+  "version": "4.2.3-dev",
   "lockfileVersion": 1,
   "requires": true,
   "dependencies": {
@@ -518,9 +518,9 @@
       }
     },
     "commander": {
-      "version": "6.1.0",
-      "resolved": "https://registry.npmjs.org/commander/-/commander-6.1.0.tgz",
-      "integrity": "sha512-wl7PNrYWd2y5mp1OK/LhTlv8Ff4kQJQRXXAvF+uU/TPNiVJUxZLRYGj/B0y/lPGAVcSbJqH2Za/cvHmrPMC8mA=="
+      "version": "6.2.0",
+      "resolved": "https://registry.npmjs.org/commander/-/commander-6.2.0.tgz",
+      "integrity": "sha512-zP4jEKbe8SHzKJYQmq8Y9gYjtO/POJLgIdKgV7B9qNmABVFVc+ctqSX6iXh4mCpJfRBOabiZ2YKPg8ciDw6C+Q=="
     },
     "commondir": {
       "version": "1.0.1",
diff --git a/package.json b/package.json
index 0ac8f084..8dac934c 100644
--- a/package.json
+++ b/package.json
@@ -9,7 +9,7 @@
     "url": "https://github.com/jupyterhub/configurable-http-proxy.git"
   },
   "dependencies": {
-    "commander": "~6.1.0",
+    "commander": "~6.2.0",
     "http-proxy": "^1.18.1",
     "lynx": "^0.2.0",
     "strftime": "~0.10.0",