diff --git a/package-lock.json b/package-lock.json
index d5d09f0..e8afa20 100644
--- a/package-lock.json
+++ b/package-lock.json
@@ -2032,6 +2032,14 @@
       "dev": true,
       "requires": {
         "merge": "^1.1.3"
+      },
+      "dependencies": {
+        "merge": {
+          "version": "1.2.1",
+          "resolved": "https://registry.npmjs.org/merge/-/merge-1.2.1.tgz",
+          "integrity": "sha512-VjFo4P5Whtj4vsLzsYBu5ayHhoHJ0UqNm7ibvShmbmoz7tGi0vXaoJbGdB+GmDMLUdg8DpQXEIeVDAe8MaABvQ==",
+          "dev": true
+        }
       }
     },
     "execa": {
@@ -5575,9 +5583,9 @@
       }
     },
     "merge": {
-      "version": "1.2.1",
-      "resolved": "https://registry.npmjs.org/merge/-/merge-1.2.1.tgz",
-      "integrity": "sha512-VjFo4P5Whtj4vsLzsYBu5ayHhoHJ0UqNm7ibvShmbmoz7tGi0vXaoJbGdB+GmDMLUdg8DpQXEIeVDAe8MaABvQ=="
+      "version": "2.1.1",
+      "resolved": "https://registry.npmjs.org/merge/-/merge-2.1.1.tgz",
+      "integrity": "sha512-jz+Cfrg9GWOZbQAnDQ4hlVnQky+341Yk5ru8bZSe6sIDTCIg8n9i/u7hSQGSVOF3C7lH6mGtqjkiT9G4wFLL0w=="
     },
     "merge-descriptors": {
       "version": "1.0.1",
diff --git a/package.json b/package.json
index c18b9b6..151350e 100644
--- a/package.json
+++ b/package.json
@@ -68,7 +68,7 @@
     "lodash": "^4.17.19",
     "lusca": "^1.4.1",
     "mailchimp-api-v3": "^1.13.1",
-    "merge": "^1.2.1",
+    "merge": "^2.1.1",
     "mime": "^2.4.0",
     "moment": "^2.22.2",
     "morgan": "^1.9.1",