diff --git a/digdag-ui/package-lock.json b/digdag-ui/package-lock.json
index e3b7a6df3c..7e4f7a1ff2 100644
--- a/digdag-ui/package-lock.json
+++ b/digdag-ui/package-lock.json
@@ -12432,9 +12432,9 @@
       }
     },
     "urijs": {
-      "version": "1.18.9",
-      "resolved": "https://registry.npmjs.org/urijs/-/urijs-1.18.9.tgz",
-      "integrity": "sha1-BtUD1PGQfcvZBvvYCLOEV+xA3uY="
+      "version": "1.19.11",
+      "resolved": "https://registry.npmjs.org/urijs/-/urijs-1.19.11.tgz",
+      "integrity": "sha512-HXgFDgDommxn5/bIv0cnQZsPhHDA90NPHD6+c/v21U5+Sx5hoP8+dP9IZXBU1gIfvdRfhG8cel9QNPeionfcCQ=="
     },
     "urix": {
       "version": "0.1.0",
diff --git a/digdag-ui/package.json b/digdag-ui/package.json
index 8e683c1e12..f357175ad4 100644
--- a/digdag-ui/package.json
+++ b/digdag-ui/package.json
@@ -47,7 +47,7 @@
     "snazzy": "^6.0.0",
     "tar-js": "^0.3.0",
     "tether": "^1.4.5",
-    "urijs": "1.18.9",
+    "urijs": "1.19.11",
     "url-parse": "1.4.3",
     "uuid": "^3.2.1",
     "whatwg-fetch": "2.0.3"