diff --git a/package.json b/package.json
index 8d25d98077..a3439f0bbd 100644
--- a/package.json
+++ b/package.json
@@ -187,7 +187,7 @@
     "classnames": "2.3.2",
     "common-tags": "1.8.2",
     "compression": "1.7.4",
-    "config": "3.3.8",
+    "config": "3.3.9",
     "core-js": "3.27.2",
     "deep-eql": "4.1.3",
     "deepcopy": "2.1.0",
diff --git a/yarn.lock b/yarn.lock
index 3b21fba9e4..a0f9beb309 100644
--- a/yarn.lock
+++ b/yarn.lock
@@ -3265,12 +3265,12 @@ concurrently@^7.0.0:
     tree-kill "^1.2.2"
     yargs "^17.3.1"
 
-config@3.3.8:
-  version "3.3.8"
-  resolved "https://registry.yarnpkg.com/config/-/config-3.3.8.tgz#14ef7aef22af25877fdaee696ec64d761feb7be0"
-  integrity sha512-rFzF6VESOdp7wAXFlB9IOZI4ouL05g3A03v2eRcTHj2JBQaTNJ40zhAUl5wRbWHqLZ+uqp/7OE0BWWtAVgrong==
+config@3.3.9:
+  version "3.3.9"
+  resolved "https://registry.yarnpkg.com/config/-/config-3.3.9.tgz#27fae95b43e0e1d5723e54143c090954d8e49572"
+  integrity sha512-G17nfe+cY7kR0wVpc49NCYvNtelm/pPy8czHoFkAgtV1lkmcp7DHtWCdDu+C9Z7gb2WVqa9Tm3uF9aKaPbCfhg==
   dependencies:
-    json5 "^2.2.1"
+    json5 "^2.2.3"
 
 confusing-browser-globals@^1.0.10:
   version "1.0.11"
@@ -6470,7 +6470,7 @@ json5@^1.0.1:
   dependencies:
     minimist "^1.2.0"
 
-json5@^2.1.2, json5@^2.2.1, json5@^2.2.2:
+json5@^2.1.2, json5@^2.2.2, json5@^2.2.3:
   version "2.2.3"
   resolved "https://registry.yarnpkg.com/json5/-/json5-2.2.3.tgz#78cd6f1a19bdc12b73db5ad0c61efd66c1e29283"
   integrity sha512-XmOWe7eyHYH14cLdVPoyg+GOH3rYX++KpzrylJwSW98t3Nk+U8XOl8FWKOgwtzdb8lXGf6zYwDUzeHMWfxasyg==