diff --git a/digdag-ui/package-lock.json b/digdag-ui/package-lock.json
index e3b7a6df3c..a47874ee17 100644
--- a/digdag-ui/package-lock.json
+++ b/digdag-ui/package-lock.json
@@ -12432,9 +12432,9 @@
       }
     },
     "urijs": {
-      "version": "1.18.9",
-      "resolved": "https://registry.npmjs.org/urijs/-/urijs-1.18.9.tgz",
-      "integrity": "sha1-BtUD1PGQfcvZBvvYCLOEV+xA3uY="
+      "version": "1.19.6",
+      "resolved": "https://registry.npmjs.org/urijs/-/urijs-1.19.6.tgz",
+      "integrity": "sha512-eSXsXZ2jLvGWeLYlQA3Gh36BcjF+0amo92+wHPyN1mdR8Nxf75fuEuYTd9c0a+m/vhCjRK0ESlE9YNLW+E1VEw=="
     },
     "urix": {
       "version": "0.1.0",
diff --git a/digdag-ui/package.json b/digdag-ui/package.json
index 8e683c1e12..71beedeb9d 100644
--- a/digdag-ui/package.json
+++ b/digdag-ui/package.json
@@ -47,7 +47,7 @@
     "snazzy": "^6.0.0",
     "tar-js": "^0.3.0",
     "tether": "^1.4.5",
-    "urijs": "1.18.9",
+    "urijs": "1.19.6",
     "url-parse": "1.4.3",
     "uuid": "^3.2.1",
     "whatwg-fetch": "2.0.3"