diff --git a/package.json b/package.json
index e196bfc..25d39d4 100644
--- a/package.json
+++ b/package.json
@@ -95,6 +95,6 @@
     "postcss-cli": "2.6.0",
     "request": "2.79.0",
     "serialize-error": "2.1.0",
-    "urijs": "1.18.4"
+    "urijs": "1.19.6"
   }
 }
diff --git a/yarn.lock b/yarn.lock
index 60b6b23..68a716b 100644
--- a/yarn.lock
+++ b/yarn.lock
@@ -862,7 +862,7 @@ compressible@~2.0.8:
 
 compression@1.6.2:
   version "1.6.2"
-  resolved "http://registry.npmjs.org/compression/-/compression-1.6.2.tgz#cceb121ecc9d09c52d7ad0c3350ea93ddd402bc3"
+  resolved "https://registry.npmjs.org/compression/-/compression-1.6.2.tgz#cceb121ecc9d09c52d7ad0c3350ea93ddd402bc3"
   dependencies:
     accepts "~1.3.3"
     bytes "2.3.0"
@@ -4660,9 +4660,9 @@ update-notifier@0.5.0:
     semver-diff "^2.0.0"
     string-length "^1.0.0"
 
-urijs@1.18.4:
-  version "1.18.4"
-  resolved "https://registry.yarnpkg.com/urijs/-/urijs-1.18.4.tgz#0c97a17a0b0e4a2e635a565c2f16c0f180605e28"
+urijs@1.19.6:
+  version "1.19.6"
+  resolved "https://registry.yarnpkg.com/urijs/-/urijs-1.19.6.tgz#51f8cb17ca16faefb20b9a31ac60f84aa2b7c870"
 
 url-parse-lax@^1.0.0:
   version "1.0.0"