diff --git a/packages/browserid-verifier/package.json b/packages/browserid-verifier/package.json
index b4f19433b9..72f62fdc1f 100644
--- a/packages/browserid-verifier/package.json
+++ b/packages/browserid-verifier/package.json
@@ -12,7 +12,7 @@
   "bugs": "https://github.com/mozilla/fxa/issues/",
   "main": "lib/server.js",
   "dependencies": {
-    "async": "3.2.2",
+    "async": "3.2.3",
     "body-parser": "^1.19.1",
     "browserid-local-verify": "0.5.2",
     "compute-cluster": "0.0.9",
diff --git a/yarn.lock b/yarn.lock
index fdb5f634d8..9b9fe3d1d7 100644
--- a/yarn.lock
+++ b/yarn.lock
@@ -10759,7 +10759,14 @@ __metadata:
   languageName: node
   linkType: hard
 
-"async@npm:3.2.2, async@npm:3.2.x, async@npm:^3.2.0, async@npm:~3.2.0":
+"async@npm:3.2.3":
+  version: 3.2.3
+  resolution: "async@npm:3.2.3"
+  checksum: c4bee57ab2249af3dc83ca3ef9acfa8e822c0d5e5aa41bae3eaf7f673648343cd64ecd7d26091ffd357f3f044428b17b5f00098494b6cf8b6b3e9681f0636ca1
+  languageName: node
+  linkType: hard
+
+"async@npm:3.2.x, async@npm:^3.2.0, async@npm:~3.2.0":
   version: 3.2.2
   resolution: "async@npm:3.2.2"
   checksum: 90712c98df0c6d0ef0190f8bee9797bf6c7035a1317c9a036b80306a8d2246396b3ee356b4540ff349e29e625fafa25d4f04e11b6ac1c5f6b4c74c803e641137
@@ -12537,7 +12544,7 @@ __metadata:
   version: 0.0.0-use.local
   resolution: "browserid-verifier@workspace:packages/browserid-verifier"
   dependencies:
-    async: 3.2.2
+    async: 3.2.3
     audit-filter: 0.5.0
     body-parser: ^1.19.1
     browserid-local-verify: 0.5.2