diff --git a/package-lock.json b/package-lock.json
index a4b0fc814..394f60971 100644
--- a/package-lock.json
+++ b/package-lock.json
@@ -4512,9 +4512,9 @@
       "dev": true
     },
     "semver": {
-      "version": "6.1.2",
-      "resolved": "https://registry.npmjs.org/semver/-/semver-6.1.2.tgz",
-      "integrity": "sha512-z4PqiCpomGtWj8633oeAdXm1Kn1W++3T8epkZYnwiVgIYIJ0QHszhInYSJTYxebByQH7KVCEAn8R9duzZW2PhQ=="
+      "version": "6.3.1",
+      "resolved": "https://registry.npmjs.org/semver/-/semver-6.3.1.tgz",
+      "integrity": "sha512-BR7VvDCVHO+q2xBEWskxS6DJE1qRnb7DxzUrogb71CWoSficBxYsiAGd+Kl0mmq/MprG9yArRkyrQxTO6XjMzA=="
     },
     "set-blocking": {
       "version": "2.0.0",
diff --git a/package.json b/package.json
index 9607e46de..1f98087e5 100644
--- a/package.json
+++ b/package.json
@@ -29,7 +29,7 @@
     "@actions/http-client": "^1.0.6",
     "@actions/io": "^1.0.2",
     "@actions/tool-cache": "^1.3.3",
-    "semver": "^6.1.1"
+    "semver": "^6.3.1"
   },
   "devDependencies": {
     "@types/jest": "^24.0.13",