diff --git a/rest/package-lock.json b/rest/package-lock.json
index 2c9877e..83e8c2a 100644
--- a/rest/package-lock.json
+++ b/rest/package-lock.json
@@ -122,9 +122,12 @@
       }
     },
     "async": {
-      "version": "1.5.2",
-      "resolved": "https://registry.npmjs.org/async/-/async-1.5.2.tgz",
-      "integrity": "sha1-7GphrlZIDAw8skHJVhjiCJL5Zyo="
+      "version": "2.6.4",
+      "resolved": "https://registry.npmjs.org/async/-/async-2.6.4.tgz",
+      "integrity": "sha512-mzo5dfJYwAn29PeiJ0zvwTo04zj8HDJj0Mn8TD7sno7q12prdbnasKJHhkm2c1LgrhlJ0teaea8860oxi51mGA==",
+      "requires": {
+        "lodash": "^4.17.14"
+      }
     },
     "base-x": {
       "version": "3.0.7",
diff --git a/rest/package.json b/rest/package.json
index 1ae85bb..a26d49d 100644
--- a/rest/package.json
+++ b/rest/package.json
@@ -13,7 +13,7 @@
   "license": "ISC",
   "dependencies": {
     "@grpc/proto-loader": "^0.1.0",
-    "async": "^1.5.2",
+    "async": "^2.6.4",
     "bitcore-lib-cash": "^8.8.4",
     "cashaddrjs": "^0.3.8",
     "cors": "^2.8.5",