diff --git a/packages/serverless-plugin/package.json b/packages/serverless-plugin/package.json
index b942a05f59..aee2ce27cf 100644
--- a/packages/serverless-plugin/package.json
+++ b/packages/serverless-plugin/package.json
@@ -28,7 +28,7 @@
     "chalk": "^2.4.2",
     "debug": "^4.1.1",
     "fs-extra": "^7.0.1",
-    "js-yaml": "^3.12.1",
+    "js-yaml": "^3.14.2",
     "klaw": "^3.0.0",
     "lodash.clonedeep": "^4.5.0",
     "lodash.merge": "^4.6.1",
diff --git a/packages/serverless-plugin/yarn.lock b/packages/serverless-plugin/yarn.lock
index b48ae4a071..ac8ed60d7e 100644
--- a/packages/serverless-plugin/yarn.lock
+++ b/packages/serverless-plugin/yarn.lock
@@ -136,10 +136,10 @@ jmespath@0.15.0:
   resolved "https://registry.yarnpkg.com/jmespath/-/jmespath-0.15.0.tgz#a3f222a9aae9f966f5d27c796510e28091764217"
   integrity sha1-o/Iiqarp+Wb10nx5ZRDigJF2Qhc=
 
-js-yaml@^3.12.1:
-  version "3.14.0"
-  resolved "https://registry.yarnpkg.com/js-yaml/-/js-yaml-3.14.0.tgz#a7a34170f26a21bb162424d8adacb4113a69e482"
-  integrity sha512-/4IbIeHcD9VMHFqDR/gQ7EdZdLimOvW2DdcxFjdyyZ9NsbS+ccrXqVWDtab/lRl5AlUqmpBx8EhPaWR+OtY17A==
+js-yaml@^3.14.2:
+  version "3.14.2"
+  resolved "https://nexus.core.cvent.org/nexus/repository/npm-public/js-yaml/-/js-yaml-3.14.2.tgz#77485ce1dd7f33c061fd1b16ecea23b55fcb04b0"
+  integrity sha512-PMSmkqxr106Xa156c2M265Z+FTrPl+oxd/rgOQy2tijQeK5TxQ43psO1ZCwhVOSdnn+RzkzlRz/eY4BgJBYVpg==
   dependencies:
     argparse "^1.0.7"
     esprima "^4.0.0"
@@ -184,7 +184,7 @@ ms@^2.1.1:
   integrity sha512-sGkPx+VjMtmA6MX27oA4FBFELFCZZ4S4XqeGOXCv68tT+jb3vk/RyaKWP0PTKyWtmLSM0b+adUTEvbs1PEaH2w==
 
 "next-aws-lambda@file:../apigw-lambda-compat":
-  version "2.5.1-alpha.0"
+  version "2.6.0-alpha.1"
 
 punycode@1.3.2:
   version "1.3.2"