diff --git a/packages/@aws-cdk/cx-api/package.json b/packages/@aws-cdk/cx-api/package.json
index d2ca4c58fcff5..58876a94fbdc0 100644
--- a/packages/@aws-cdk/cx-api/package.json
+++ b/packages/@aws-cdk/cx-api/package.json
@@ -45,7 +45,7 @@
     "organization": true
   },
   "dependencies": {
-    "semver": "^7.1.1"
+    "semver": "^7.1.2"
   },
   "jest": {
     "moduleFileExtensions": [
diff --git a/packages/aws-cdk/package.json b/packages/aws-cdk/package.json
index 44870b18787c6..e50329dc6194c 100644
--- a/packages/aws-cdk/package.json
+++ b/packages/aws-cdk/package.json
@@ -80,7 +80,7 @@
     "promptly": "^3.0.3",
     "proxy-agent": "^3.1.1",
     "request": "^2.88.0",
-    "semver": "^7.1.1",
+    "semver": "^7.1.2",
     "source-map-support": "^0.5.16",
     "table": "^5.4.6",
     "uuid": "^3.4.0",
diff --git a/tools/pkglint/package.json b/tools/pkglint/package.json
index 72496c5372bf8..93b89f5e5d865 100644
--- a/tools/pkglint/package.json
+++ b/tools/pkglint/package.json
@@ -42,7 +42,7 @@
     "case": "^1.6.2",
     "colors": "^1.4.0",
     "fs-extra": "^8.1.0",
-    "semver": "^7.1.1",
+    "semver": "^7.1.2",
     "yargs": "^15.1.0"
   }
 }
diff --git a/yarn.lock b/yarn.lock
index 7459ad8d2de30..9dcb459ee8004 100644
--- a/yarn.lock
+++ b/yarn.lock
@@ -10140,10 +10140,10 @@ semver@^6.0.0, semver@^6.1.2, semver@^6.2.0, semver@^6.3.0:
   resolved "https://registry.yarnpkg.com/semver/-/semver-6.3.0.tgz#ee0a64c8af5e8ceea67687b133761e1becbd1d3d"
   integrity sha512-b39TBaTSfV6yBrapU89p5fKekE2m/NwnDocOVruQFS1/veMgdzuPcnOM34M6CwxW8jH/lxEa5rBoDeUwu5HHTw==
 
-semver@^7.1.1:
-  version "7.1.1"
-  resolved "https://registry.yarnpkg.com/semver/-/semver-7.1.1.tgz#29104598a197d6cbe4733eeecbe968f7b43a9667"
-  integrity sha512-WfuG+fl6eh3eZ2qAf6goB7nhiCd7NPXhmyFxigB/TOkQyeLP8w8GsVehvtGNtnNmyboz4TgeK40B1Kbql/8c5A==
+semver@^7.1.1, semver@^7.1.2:
+  version "7.1.2"
+  resolved "https://registry.yarnpkg.com/semver/-/semver-7.1.2.tgz#847bae5bce68c5d08889824f02667199b70e3d87"
+  integrity sha512-BJs9T/H8sEVHbeigqzIEo57Iu/3DG6c4QoqTfbQB3BPA4zgzAomh/Fk9E7QtjWQ8mx2dgA9YCfSF4y9k9bHNpQ==
 
 send@0.17.1:
   version "0.17.1"