diff --git a/app/package-lock.json b/app/package-lock.json
index 5bb2bf34f..dc02a5bfe 100644
--- a/app/package-lock.json
+++ b/app/package-lock.json
@@ -32,7 +32,7 @@
         "lodash": "~3.10.1",
         "lodash.debounce": "~3.1.1",
         "marked": "~0.3.19",
-        "mustache": "^4.0.0",
+        "mustache": "^4.2.0",
         "node-emoji": "~1.8.1",
         "node-lang-info": "~0.2.1",
         "openurl": "~1.1.1",
@@ -844,14 +844,12 @@
       "integrity": "sha1-VgiurfwAvmwpAd9fmGF4jeDVl8g="
     },
     "node_modules/mustache": {
-      "version": "4.0.0",
-      "resolved": "https://registry.npmjs.org/mustache/-/mustache-4.0.0.tgz",
-      "integrity": "sha512-FJgjyX/IVkbXBXYUwH+OYwQKqWpFPLaLVESd70yHjSDunwzV2hZOoTBvPf4KLoxesUzzyfTH6F784Uqd7Wm5yA==",
+      "version": "4.2.0",
+      "resolved": "https://registry.npmjs.org/mustache/-/mustache-4.2.0.tgz",
+      "integrity": "sha512-71ippSywq5Yb7/tVYyGbkBggbU8H3u5Rz56fH60jGFgr8uHwxs+aSKeqmluIVzM0m0kB7xQjKS6qPfd0b2ZoqQ==",
+      "license": "MIT",
       "bin": {
         "mustache": "bin/mustache"
-      },
-      "engines": {
-        "npm": ">=1.4.0"
       }
     },
     "node_modules/node-emoji": {
@@ -2066,9 +2064,9 @@
       "integrity": "sha1-VgiurfwAvmwpAd9fmGF4jeDVl8g="
     },
     "mustache": {
-      "version": "4.0.0",
-      "resolved": "https://registry.npmjs.org/mustache/-/mustache-4.0.0.tgz",
-      "integrity": "sha512-FJgjyX/IVkbXBXYUwH+OYwQKqWpFPLaLVESd70yHjSDunwzV2hZOoTBvPf4KLoxesUzzyfTH6F784Uqd7Wm5yA=="
+      "version": "4.2.0",
+      "resolved": "https://registry.npmjs.org/mustache/-/mustache-4.2.0.tgz",
+      "integrity": "sha512-71ippSywq5Yb7/tVYyGbkBggbU8H3u5Rz56fH60jGFgr8uHwxs+aSKeqmluIVzM0m0kB7xQjKS6qPfd0b2ZoqQ=="
     },
     "node-emoji": {
       "version": "1.8.1",
diff --git a/app/package.json b/app/package.json
index eb6aaa069..87918aa8d 100644
--- a/app/package.json
+++ b/app/package.json
@@ -74,7 +74,7 @@
     "lodash": "~3.10.1",
     "lodash.debounce": "~3.1.1",
     "marked": "~0.3.19",
-    "mustache": "^4.0.0",
+    "mustache": "^4.2.0",
     "node-emoji": "~1.8.1",
     "node-lang-info": "~0.2.1",
     "openurl": "~1.1.1",