diff --git a/package-lock.json b/package-lock.json
index 4a6dc03654..6f1595aea9 100644
--- a/package-lock.json
+++ b/package-lock.json
@@ -14581,9 +14581,9 @@
       "integrity": "sha1-u+Z0BseaqFxc/sdm/lc0VV36EnQ="
     },
     "otpauth": {
-      "version": "7.0.8",
-      "resolved": "https://registry.npmjs.org/otpauth/-/otpauth-7.0.8.tgz",
-      "integrity": "sha512-cNBDVbxtgIFXRmmvMcIEMN4qFFM1u16NLfjakfTC5WGjxPDQNfj7cTvtGPBYW7A3W/D4nshPv2OBiByZN+awtw==",
+      "version": "7.0.9",
+      "resolved": "https://registry.npmjs.org/otpauth/-/otpauth-7.0.9.tgz",
+      "integrity": "sha512-6dN1gFE0zCTYmVgy3THf3RXPKl4V7SyjDss2FSXlztE6pVqnOmbEQkqYoXKVC9Cf7OISb6/scHvKH26y/+c92A==",
       "requires": {
         "jssha": "~3.2.0"
       }
diff --git a/package.json b/package.json
index d0c1de7729..5200b04290 100644
--- a/package.json
+++ b/package.json
@@ -51,7 +51,7 @@
     "immutable-devtools": "0.1.5",
     "inquirer": "8.2.0",
     "js-beautify": "1.14.0",
-    "otpauth": "7.0.8",
+    "otpauth": "7.0.9",
     "package-json": "7.0.0",
     "parse": "3.4.1",
     "passport": "0.5.2",