diff --git a/services/contacts/package-lock.json b/services/contacts/package-lock.json
index 167c10054c..66083487bb 100644
--- a/services/contacts/package-lock.json
+++ b/services/contacts/package-lock.json
@@ -1271,9 +1271,12 @@
       "dev": true
     },
     "async": {
-      "version": "0.8.0",
-      "resolved": "https://registry.npmjs.org/async/-/async-0.8.0.tgz",
-      "integrity": "sha1-7mXsdymML/FFa8RBigUtDwZDURI="
+      "version": "2.6.3",
+      "resolved": "https://registry.npmjs.org/async/-/async-2.6.3.tgz",
+      "integrity": "sha512-zflvls11DCy+dQWzTW2dzuilv8Z5X/pjfmZOWba6TNIVDm+2UDaJmXSOXlasHKfNBs8oo3M0aT50fDEWfKZjXg==",
+      "requires": {
+        "lodash": "^4.17.14"
+      }
     },
     "async-listener": {
       "version": "0.6.10",
@@ -3397,8 +3400,7 @@
     "lodash": {
       "version": "4.17.15",
       "resolved": "https://registry.npmjs.org/lodash/-/lodash-4.17.15.tgz",
-      "integrity": "sha512-8xOcRHvCjnocdS5cpwXQXVzmmh5e5+saE2QGoeQmbKmRS6J3VQppPOIt0MnmE+4xlZoumy0GPG0D0MVIQbNA1A==",
-      "dev": true
+      "integrity": "sha512-8xOcRHvCjnocdS5cpwXQXVzmmh5e5+saE2QGoeQmbKmRS6J3VQppPOIt0MnmE+4xlZoumy0GPG0D0MVIQbNA1A=="
     },
     "lodash.at": {
       "version": "4.6.0",
diff --git a/services/contacts/package.json b/services/contacts/package.json
index 08bfbdcca6..66be7ddb90 100644
--- a/services/contacts/package.json
+++ b/services/contacts/package.json
@@ -19,7 +19,7 @@
     "format:fix": "node_modules/.bin/prettier-eslint $PWD'/**/*.js' --write"
   },
   "dependencies": {
-    "async": "~0.8.0",
+    "async": "^2.6.3",
     "body-parser": "^1.19.0",
     "express": "^4.17.1",
     "logger-sharelatex": "^1.9.0",