diff --git a/package.json b/package.json
index 511be2e7..f9f87628 100644
--- a/package.json
+++ b/package.json
@@ -10,7 +10,7 @@
     "@oclif/errors": "^1.3.4",
     "@types/semver": "^7.3.4",
     "cli-ux": "^5.5.1",
-    "cross-spawn": "^7.0.3",
+    "cross-spawn": "^7.0.5",
     "debug": "^4.3.1",
     "filesize": "^6.1.0",
     "fs-extra": "^9.0.1",
diff --git a/yarn.lock b/yarn.lock
index f73df147..a109c66c 100644
--- a/yarn.lock
+++ b/yarn.lock
@@ -2396,6 +2396,15 @@ cross-spawn@^7.0.0, cross-spawn@^7.0.2, cross-spawn@^7.0.3:
     shebang-command "^2.0.0"
     which "^2.0.1"
 
+cross-spawn@^7.0.5:
+  version "7.0.6"
+  resolved "https://registry.yarnpkg.com/cross-spawn/-/cross-spawn-7.0.6.tgz#8a58fe78f00dcd70c370451759dfbfaf03e8ee9f"
+  integrity sha512-uV2QOWP2nWzsy2aMp8aRibhi9dlzF5Hgh5SHaB9OiTGEyDTiJJyx0uy51QXdyWbtAHNua4XJzUKca3OzKUd3vA==
+  dependencies:
+    path-key "^3.1.0"
+    shebang-command "^2.0.0"
+    which "^2.0.1"
+
 crypto-random-string@^1.0.0:
   version "1.0.0"
   resolved "https://registry.npmjs.org/crypto-random-string/-/crypto-random-string-1.0.0.tgz#a230f64f568310e1498009940790ec99545bca7e"