diff --git a/package.json b/package.json
index 524f87e98..304a526d3 100644
--- a/package.json
+++ b/package.json
@@ -19,7 +19,7 @@
     "Idle.Js": "git+https://github.com/shawnmclean/Idle.js",
     "archiver": "^2.1.1",
     "async": "^2.1.4",
-    "aws-sdk": "^2.7.20",
+    "aws-sdk": "^2.345.0",
     "azure-storage": "^2.7.0",
     "base64url": "^3.0.0",
     "blueimp-md5": "^2.6.0",
@@ -62,7 +62,7 @@
     "jsdom-nogyp": "^0.8.3",
     "keymaster": "^1.6.2",
     "list.js": "^1.5.0",
-    "lodash": "^4.17.4",
+    "lodash": "^4.17.11",
     "lz-string": "git+https://github.com/hackmdio/lz-string.git",
     "markdown-it": "^8.2.2",
     "markdown-it-abbr": "^1.0.4",
@@ -98,7 +98,7 @@
     "passport-ldapauth": "^2.0.0",
     "passport-local": "^1.0.0",
     "passport-oauth2": "^1.4.0",
-    "passport-saml": "^0.31.0",
+    "passport-saml": "^0.35.0",
     "passport-twitter": "^1.0.4",
     "passport.socketio": "^3.7.0",
     "pdfobject": "^2.0.201604172",
@@ -108,7 +108,7 @@
     "randomcolor": "^0.5.3",
     "raphael": "git+https://github.com/dmitrybaranovskiy/raphael",
     "readline-sync": "^1.4.7",
-    "request": "^2.79.0",
+    "request": "^2.88.0",
     "reveal.js": "~3.6.0",
     "scrypt": "^6.0.3",
     "select2": "^3.5.2-browserify",