diff --git a/package.json b/package.json
index 77ec4a440..c99611743 100644
--- a/package.json
+++ b/package.json
@@ -19,7 +19,7 @@
     "cookie-parser": "^1.4.3",
     "express": "^4.16.3",
     "express-graphql": "^0.6.12",
-    "express-jwt": "^5.3.1",
+    "express-jwt": "^6.0.0",
     "graphql": "^0.13.2",
     "history": "^4.7.2",
     "isomorphic-style-loader": "^4.0.0",
diff --git a/yarn.lock b/yarn.lock
index 4b04643bd..4449b0f7e 100644
--- a/yarn.lock
+++ b/yarn.lock
@@ -3419,9 +3419,9 @@ express-graphql@^0.6.12:
     http-errors "^1.3.0"
     raw-body "^2.3.2"
 
-express-jwt@^5.3.1:
-  version "5.3.1"
-  resolved "https://registry.yarnpkg.com/express-jwt/-/express-jwt-5.3.1.tgz#66f05c7dddb5409c037346a98b88965bb10ea4ae"
+express-jwt@^6.0.0:
+  version "6.0.0"
+  resolved "https://registry.yarnpkg.com/express-jwt/-/express-jwt-6.0.0.tgz#20886c730983ffb1c706a4383235df86eff349b8"
   dependencies:
     async "^1.5.0"
     express-unless "^0.3.0"
@@ -6322,7 +6322,7 @@ onecolor@^3.0.4:
 
 onetime@^1.0.0:
   version "1.1.0"
-  resolved "http://registry.npmjs.org/onetime/-/onetime-1.1.0.tgz#a1f7838f8314c516f05ecefcbc4ccfe04b4ed789"
+  resolved "https://registry.npmjs.org/onetime/-/onetime-1.1.0.tgz#a1f7838f8314c516f05ecefcbc4ccfe04b4ed789"
 
 onetime@^2.0.0:
   version "2.0.1"