diff --git a/package.json b/package.json
index 0030c958ea..56ad1ab04b 100644
--- a/package.json
+++ b/package.json
@@ -166,7 +166,7 @@
     "moment-timezone": "0.5.23",
     "multer": "1.4.4",
     "mysql2": "2.3.3",
-    "nconf": "0.11.4",
+    "nconf": "0.12.0",
     "node-jose": "2.1.1",
     "oembed-parser": "1.4.9",
     "passport": "0.5.2",
diff --git a/yarn.lock b/yarn.lock
index 16695652e4..9e876534aa 100644
--- a/yarn.lock
+++ b/yarn.lock
@@ -2975,7 +2975,7 @@ async@^2.1.2, async@^2.6.0, async@^2.6.1:
   dependencies:
     lodash "^4.17.14"
 
-async@^3.0.1, async@^3.2.0, async@~3.2.0:
+async@^3.0.0, async@^3.0.1, async@^3.2.0, async@~3.2.0:
   version "3.2.3"
   resolved "https://registry.yarnpkg.com/async/-/async-3.2.3.tgz#ac53dafd3f4720ee9e8a160628f18ea91df196c9"
   integrity sha512-spZRyzKL5l5BZQrr/6m/SqFdBN0q3OCI0f9rjfBzCMBIP4p75P620rR3gTmaksNOhmzgdxcaxdNfMy6anrbM0g==
@@ -8950,7 +8950,17 @@ nconf@0.11.3:
     secure-keys "^1.0.0"
     yargs "^16.1.1"
 
-nconf@0.11.4, nconf@^0.11.3:
+nconf@0.12.0:
+  version "0.12.0"
+  resolved "https://registry.yarnpkg.com/nconf/-/nconf-0.12.0.tgz#9cf70757aae4d440d43ed53c42f87da18471b8bf"
+  integrity sha512-T3fZPw3c7Dfrz8JBQEbEcZJ2s8f7cUMpKuyBtsGQe0b71pcXx6gNh4oti2xh5dxB+gO9ufNfISBlGvvWtfyMcA==
+  dependencies:
+    async "^3.0.0"
+    ini "^2.0.0"
+    secure-keys "^1.0.0"
+    yargs "^16.1.1"
+
+nconf@^0.11.3:
   version "0.11.4"
   resolved "https://registry.yarnpkg.com/nconf/-/nconf-0.11.4.tgz#7f925d27569738a2a10c3ba4b56310c8821b308b"
   integrity sha512-YaDR846q11JnG1vTrhJ0QIlhiGY6+W1bgWtReG9SS3vkTl3AoNwFvUItdhG6/ZjGCfWpUVuRTNEBTDAQ3nWhGw==