diff --git a/lyrical-graphql/package.json b/lyrical-graphql/package.json
index 6b18538..bf73bad 100644
--- a/lyrical-graphql/package.json
+++ b/lyrical-graphql/package.json
@@ -30,7 +30,7 @@
     "graphql": "^0.8.2",
     "html-webpack-plugin": "^2.26.0",
     "lodash": "^4.17.4",
-    "mongoose": "^4.7.8",
+    "mongoose": "^4.13.21",
     "nodemon": "^1.19.1",
     "passport": "^0.3.2",
     "passport-local": "^1.0.0",
diff --git a/lyrical-graphql/yarn.lock b/lyrical-graphql/yarn.lock
index bbfeb1f..57e9d4c 100644
--- a/lyrical-graphql/yarn.lock
+++ b/lyrical-graphql/yarn.lock
@@ -3180,10 +3180,10 @@ mongodb@2.2.34:
     mongodb-core "2.1.20"
     readable-stream "2.2.7"
 
-mongoose@^4.7.8:
-  version "4.13.18"
-  resolved "https://registry.yarnpkg.com/mongoose/-/mongoose-4.13.18.tgz#1c173de315a11e207ff59461da0fa2103b895528"
-  integrity sha512-pPZlVID+/9xl0pyBibr7CZbjYKzpJZuw58TdWwIxr3ydO/OUZqhX1kUEAQIzsOJVSsL6GnD1fb54reO35jvLtw==
+mongoose@^4.13.21:
+  version "4.13.21"
+  resolved "https://registry.yarnpkg.com/mongoose/-/mongoose-4.13.21.tgz#83f4a8461b19aca1b2274feaaaf262b71b6f034d"
+  integrity sha512-0VZtQu1rSUPwUtbb7zh6CymI0nNkVInOIDbtWNlna070qnUO14On8PpSVSwlx3gwmkKL2OkP4ioCj5YHC6trMg==
   dependencies:
     async "2.6.0"
     bson "~1.0.4"