diff --git a/investments/package-lock.json b/investments/package-lock.json
index 6c8de8f..93e6181 100644
--- a/investments/package-lock.json
+++ b/investments/package-lock.json
@@ -464,11 +464,11 @@
       "dev": true
     },
     "config": {
-      "version": "3.3.3",
-      "resolved": "https://registry.npmjs.org/config/-/config-3.3.3.tgz",
-      "integrity": "sha512-T3RmZQEAji5KYqUQpziWtyGJFli6Khz7h0rpxDwYNjSkr5ynyTWwO7WpfjHzTXclNCDfSWQRcwMb+NwxJesCKw==",
+      "version": "3.3.9",
+      "resolved": "https://registry.npmjs.org/config/-/config-3.3.9.tgz",
+      "integrity": "sha512-G17nfe+cY7kR0wVpc49NCYvNtelm/pPy8czHoFkAgtV1lkmcp7DHtWCdDu+C9Z7gb2WVqa9Tm3uF9aKaPbCfhg==",
       "requires": {
-        "json5": "^2.1.1"
+        "json5": "^2.2.3"
       }
     },
     "configstore": {
@@ -1372,12 +1372,9 @@
       "dev": true
     },
     "json5": {
-      "version": "2.1.3",
-      "resolved": "https://registry.npmjs.org/json5/-/json5-2.1.3.tgz",
-      "integrity": "sha512-KXPvOm8K9IJKFM0bmdn8QXh7udDh1g/giieX0NLCaMnb4hEiVFqnop2ImTXCc5e0/oHz3LTqmHGtExn5hfMkOA==",
-      "requires": {
-        "minimist": "^1.2.5"
-      }
+      "version": "2.2.3",
+      "resolved": "https://registry.npmjs.org/json5/-/json5-2.2.3.tgz",
+      "integrity": "sha512-XmOWe7eyHYH14cLdVPoyg+GOH3rYX++KpzrylJwSW98t3Nk+U8XOl8FWKOgwtzdb8lXGf6zYwDUzeHMWfxasyg=="
     },
     "keyv": {
       "version": "3.1.0",
@@ -1485,7 +1482,8 @@
     "minimist": {
       "version": "1.2.5",
       "resolved": "https://registry.npmjs.org/minimist/-/minimist-1.2.5.tgz",
-      "integrity": "sha512-FM9nNUYrRBAELZQT3xeZQ7fmMOBg6nWNmJKTcgsJeaLstP/UODVpGsr5OhXhhXg6f+qtJ8uiZ+PUxkDWcgIXLw=="
+      "integrity": "sha512-FM9nNUYrRBAELZQT3xeZQ7fmMOBg6nWNmJKTcgsJeaLstP/UODVpGsr5OhXhhXg6f+qtJ8uiZ+PUxkDWcgIXLw==",
+      "dev": true
     },
     "mkdirp": {
       "version": "0.5.5",
diff --git a/investments/package.json b/investments/package.json
index 6da55cf..21c05d2 100644
--- a/investments/package.json
+++ b/investments/package.json
@@ -25,7 +25,7 @@
   },
   "dependencies": {
     "body-parser": "^1.19.0",
-    "config": "^3.3.3",
+    "config": "^3.3.9",
     "express": "^4.17.1",
     "express-fileupload": "^1.2.1",
     "ramda": "^0.27.1"