diff --git a/apps/rush-lib/package.json b/apps/rush-lib/package.json
index d66d680d4be..6e6b3fae466 100644
--- a/apps/rush-lib/package.json
+++ b/apps/rush-lib/package.json
@@ -39,7 +39,7 @@
     "https-proxy-agent": "~5.0.0",
     "ignore": "~5.1.6",
     "inquirer": "~7.3.3",
-    "js-yaml": "~3.13.1",
+    "js-yaml": "~4.1.1",
     "jszip": "~3.5.0",
     "lodash": "~4.17.15",
     "minimatch": "~3.0.2",