diff --git a/package-lock.json b/package-lock.json
index 3af48463941..2de19794265 100644
--- a/package-lock.json
+++ b/package-lock.json
@@ -15,7 +15,7 @@
         "consolidate": "0.14.5",
         "dustjs-helpers": "1.5.0",
         "dustjs-linkedin": "2.5.0",
-        "ejs": "1.0.0",
+        "ejs": "^2.5.5",
         "ejs-locals": "1.0.2",
         "errorhandler": "1.2.0",
         "express": "4.12.4",
@@ -2170,10 +2170,13 @@
       "integrity": "sha1-jJshKJjYzZ8alDZlDOe+ICyen/A="
     },
     "node_modules/ejs": {
-      "version": "1.0.0",
-      "resolved": "https://registry.npmjs.org/ejs/-/ejs-1.0.0.tgz",
-      "integrity": "sha1-ycYKSKRu5FL7MqccMXuV5aofyz0=",
-      "deprecated": "Critical security bugs fixed in 2.5.5"
+      "version": "2.5.5",
+      "resolved": "https://registry.npmjs.org/ejs/-/ejs-2.5.5.tgz",
+      "integrity": "sha512-SVMZ8TKYCxHL6gb7f9QVpvnMPxZpdrT65IH6awbFex+bVAWtEYW0LoRbiViOJn6t1v/J0tVrl9fx6XOuJ5fjTA==",
+      "license": "Apache-2.0",
+      "engines": {
+        "node": ">=0.10.0"
+      }
     },
     "node_modules/ejs-locals": {
       "version": "1.0.2",
@@ -14421,9 +14424,9 @@
       "integrity": "sha1-jJshKJjYzZ8alDZlDOe+ICyen/A="
     },
     "ejs": {
-      "version": "1.0.0",
-      "resolved": "https://registry.npmjs.org/ejs/-/ejs-1.0.0.tgz",
-      "integrity": "sha1-ycYKSKRu5FL7MqccMXuV5aofyz0="
+      "version": "2.5.5",
+      "resolved": "https://registry.npmjs.org/ejs/-/ejs-2.5.5.tgz",
+      "integrity": "sha512-SVMZ8TKYCxHL6gb7f9QVpvnMPxZpdrT65IH6awbFex+bVAWtEYW0LoRbiViOJn6t1v/J0tVrl9fx6XOuJ5fjTA=="
     },
     "ejs-locals": {
       "version": "1.0.2",
diff --git a/package.json b/package.json
index d5f9362a36d..ca8b063f8f9 100644
--- a/package.json
+++ b/package.json
@@ -21,7 +21,7 @@
     "consolidate": "0.14.5",
     "dustjs-helpers": "1.5.0",
     "dustjs-linkedin": "2.5.0",
-    "ejs": "1.0.0",
+    "ejs": "2.5.5",
     "ejs-locals": "1.0.2",
     "errorhandler": "1.2.0",
     "express": "4.12.4",