diff --git a/package-lock.json b/package-lock.json
index b1f2bf7dc8..50be30249b 100644
--- a/package-lock.json
+++ b/package-lock.json
@@ -2350,7 +2350,7 @@
         "lodash._reescape": "^3.0.0",
         "lodash._reevaluate": "^3.0.0",
         "lodash._reinterpolate": "^3.0.0",
-        "lodash.template": "^3.0.0",
+        "lodash.template": ">=4.5.0",
         "minimist": "^1.1.0",
         "multipipe": "^0.1.2",
         "object-assign": "^3.0.0",
@@ -2892,7 +2892,7 @@
       "dev": true
     },
     "js-yaml": {
-      "version": "3.7.0",
+      "version": ">=3.13.1",
       "resolved": "https://registry.npmjs.org/js-yaml/-/js-yaml-3.7.0.tgz",
       "integrity": "sha1-XJZ93YN6m/3KXy3oQlOr6KHAO4A=",
       "dev": true,
@@ -3166,7 +3166,7 @@
       "dev": true
     },
     "lodash.template": {
-      "version": "3.6.2",
+      "version": ">=4.5.0",
       "resolved": "https://registry.npmjs.org/lodash.template/-/lodash.template-3.6.2.tgz",
       "integrity": "sha1-+M3sxhaaJVvpCYrosMU9N4kx0U8=",
       "dev": true,
@@ -6053,7 +6053,7 @@
         "coa": "~1.0.1",
         "colors": "~1.1.2",
         "csso": "~2.3.1",
-        "js-yaml": "~3.7.0",
+        "js-yaml": ">=3.13.1",
         "mkdirp": "~0.5.1",
         "sax": "~1.2.1",
         "whet.extend": "~0.9.9"