diff --git a/src/app/package-lock.json b/src/app/package-lock.json
index c6d2253d..d5e0ed40 100644
--- a/src/app/package-lock.json
+++ b/src/app/package-lock.json
@@ -185,9 +185,19 @@
       "dev": true
     },
     "async": {
-      "version": "0.9.2",
-      "resolved": "https://registry.npmjs.org/async/-/async-0.9.2.tgz",
-      "integrity": "sha1-rqdNXmHB+JlhO/ZL2mbUx48v0X0="
+      "version": "2.6.4",
+      "resolved": "https://registry.npmjs.org/async/-/async-2.6.4.tgz",
+      "integrity": "sha512-mzo5dfJYwAn29PeiJ0zvwTo04zj8HDJj0Mn8TD7sno7q12prdbnasKJHhkm2c1LgrhlJ0teaea8860oxi51mGA==",
+      "requires": {
+        "lodash": "^4.17.14"
+      },
+      "dependencies": {
+        "lodash": {
+          "version": "4.17.21",
+          "resolved": "https://registry.npmjs.org/lodash/-/lodash-4.17.21.tgz",
+          "integrity": "sha512-v2kDEe57lecTulaDIuNTPy3Ry4gLGJ6Z1O3vE1krgXZNrsQ+LFTGHVxVjcXPs17LhbZVGedAJv8XZ1tvj5FvSg=="
+        }
+      }
     },
     "async-each": {
       "version": "1.0.3",
@@ -1864,6 +1874,13 @@
         "async": "~0.9.0",
         "combined-stream": "~0.0.4",
         "mime": "~1.2.11"
+      },
+      "dependencies": {
+        "async": {
+          "version": "0.9.2",
+          "resolved": "https://registry.npmjs.org/async/-/async-0.9.2.tgz",
+          "integrity": "sha1-rqdNXmHB+JlhO/ZL2mbUx48v0X0="
+        }
       }
     },
     "formatio": {
@@ -4008,6 +4025,11 @@
             "mime-types": "~2.0.3"
           },
           "dependencies": {
+            "async": {
+              "version": "0.9.2",
+              "resolved": "https://registry.npmjs.org/async/-/async-0.9.2.tgz",
+              "integrity": "sha1-rqdNXmHB+JlhO/ZL2mbUx48v0X0="
+            },
             "mime-types": {
               "version": "2.0.14",
               "resolved": "https://registry.npmjs.org/mime-types/-/mime-types-2.0.14.tgz",
@@ -5656,6 +5678,13 @@
             "async": "~0.9.0",
             "combined-stream": "~0.0.4",
             "mime": "~1.2.11"
+          },
+          "dependencies": {
+            "async": {
+              "version": "0.9.2",
+              "resolved": "https://registry.npmjs.org/async/-/async-0.9.2.tgz",
+              "integrity": "sha1-rqdNXmHB+JlhO/ZL2mbUx48v0X0="
+            }
           }
         },
         "methods": {
diff --git a/src/app/package.json b/src/app/package.json
index eb39aba4..3f792859 100644
--- a/src/app/package.json
+++ b/src/app/package.json
@@ -5,7 +5,7 @@
   "main": "server.js",
   "repository": "https://github.com/openAgile/CommitStream.Web",
   "dependencies": {
-    "async": "^0.9.0",
+    "async": "^2.6.4",
     "az-bunyan": "0.0.3",
     "babel-runtime": "^5.8.20",
     "bluebird": "^2.9.24",