diff --git a/server/auth/package-lock.json b/server/auth/package-lock.json
index 4d9830ac..ac1d34c3 100644
--- a/server/auth/package-lock.json
+++ b/server/auth/package-lock.json
@@ -23,7 +23,7 @@
         "morgan": "^1.9.0",
         "nanoid": "^1.1.0",
         "node-fetch": "^2.6.7",
-        "passport": "^0.4.0",
+        "passport": "^0.6.0",
         "passport-github2": "^0.1.11"
       },
       "devDependencies": {
@@ -3228,15 +3228,20 @@
       }
     },
     "node_modules/passport": {
-      "version": "0.4.0",
-      "resolved": "https://registry.npmjs.org/passport/-/passport-0.4.0.tgz",
-      "integrity": "sha1-xQlWkTR71a07XhgCOMORTRbwWBE=",
+      "version": "0.6.0",
+      "resolved": "https://registry.npmjs.org/passport/-/passport-0.6.0.tgz",
+      "integrity": "sha512-0fe+p3ZnrWRW74fe8+SvCyf4a3Pb2/h7gFkQ8yTJpAO50gDzlfjZUZTO1k5Eg9kUct22OxHLqDZoKUWRHOh9ug==",
       "dependencies": {
         "passport-strategy": "1.x.x",
-        "pause": "0.0.1"
+        "pause": "0.0.1",
+        "utils-merge": "^1.0.1"
       },
       "engines": {
         "node": ">= 0.4.0"
+      },
+      "funding": {
+        "type": "github",
+        "url": "https://github.com/sponsors/jaredhanson"
       }
     },
     "node_modules/passport-github2": {
@@ -7129,12 +7134,13 @@
       "dev": true
     },
     "passport": {
-      "version": "0.4.0",
-      "resolved": "https://registry.npmjs.org/passport/-/passport-0.4.0.tgz",
-      "integrity": "sha1-xQlWkTR71a07XhgCOMORTRbwWBE=",
+      "version": "0.6.0",
+      "resolved": "https://registry.npmjs.org/passport/-/passport-0.6.0.tgz",
+      "integrity": "sha512-0fe+p3ZnrWRW74fe8+SvCyf4a3Pb2/h7gFkQ8yTJpAO50gDzlfjZUZTO1k5Eg9kUct22OxHLqDZoKUWRHOh9ug==",
       "requires": {
         "passport-strategy": "1.x.x",
-        "pause": "0.0.1"
+        "pause": "0.0.1",
+        "utils-merge": "^1.0.1"
       }
     },
     "passport-github2": {
diff --git a/server/auth/package.json b/server/auth/package.json
index fc6890bc..8f66099a 100644
--- a/server/auth/package.json
+++ b/server/auth/package.json
@@ -26,7 +26,7 @@
     "morgan": "^1.9.0",
     "nanoid": "^1.1.0",
     "node-fetch": "^2.6.7",
-    "passport": "^0.4.0",
+    "passport": "^0.6.0",
     "passport-github2": "^0.1.11"
   },
   "devDependencies": {