diff --git a/package.json b/package.json
index 1c5e995b63..c78920ef56 100644
--- a/package.json
+++ b/package.json
@@ -166,7 +166,7 @@
     "moment-timezone": "0.5.23",
     "multer": "1.4.4",
     "mysql2": "2.3.3",
-    "nconf": "0.11.3",
+    "nconf": "0.11.4",
     "node-jose": "2.1.1",
     "oembed-parser": "1.4.9",
     "passport": "0.5.2",
diff --git a/yarn.lock b/yarn.lock
index 2c35f79a77..a28e3763f0 100644
--- a/yarn.lock
+++ b/yarn.lock
@@ -8985,7 +8985,7 @@ nconf@0.11.2:
     secure-keys "^1.0.0"
     yargs "^16.1.1"
 
-nconf@0.11.3, nconf@^0.11.3:
+nconf@0.11.3:
   version "0.11.3"
   resolved "https://registry.yarnpkg.com/nconf/-/nconf-0.11.3.tgz#4ee545019c53f1037ca57d696836feede3c49163"
   integrity sha512-iYsAuDS9pzjVMGIzJrGE0Vk3Eh8r/suJanRAnWGBd29rVS2XtSgzcAo5l6asV3e4hH2idVONHirg1efoBOslBg==
@@ -8995,6 +8995,16 @@ nconf@0.11.3, nconf@^0.11.3:
     secure-keys "^1.0.0"
     yargs "^16.1.1"
 
+nconf@0.11.4, nconf@^0.11.3:
+  version "0.11.4"
+  resolved "https://registry.yarnpkg.com/nconf/-/nconf-0.11.4.tgz#7f925d27569738a2a10c3ba4b56310c8821b308b"
+  integrity sha512-YaDR846q11JnG1vTrhJ0QIlhiGY6+W1bgWtReG9SS3vkTl3AoNwFvUItdhG6/ZjGCfWpUVuRTNEBTDAQ3nWhGw==
+  dependencies:
+    async "^1.4.0"
+    ini "^2.0.0"
+    secure-keys "^1.0.0"
+    yargs "^16.1.1"
+
 ncp@~2.0.0:
   version "2.0.0"
   resolved "https://registry.yarnpkg.com/ncp/-/ncp-2.0.0.tgz#195a21d6c46e361d2fb1281ba38b91e9df7bdbb3"