diff --git a/services/notifications/package-lock.json b/services/notifications/package-lock.json
index af99bfea33..f6e15b2d1c 100644
--- a/services/notifications/package-lock.json
+++ b/services/notifications/package-lock.json
@@ -1266,9 +1266,12 @@
       "dev": true
     },
     "async": {
-      "version": "0.1.22",
-      "resolved": "https://registry.npmjs.org/async/-/async-0.1.22.tgz",
-      "integrity": "sha1-D8GqoIig4+8Ovi2IMbqw3PiEUGE="
+      "version": "2.6.3",
+      "resolved": "https://registry.npmjs.org/async/-/async-2.6.3.tgz",
+      "integrity": "sha512-zflvls11DCy+dQWzTW2dzuilv8Z5X/pjfmZOWba6TNIVDm+2UDaJmXSOXlasHKfNBs8oo3M0aT50fDEWfKZjXg==",
+      "requires": {
+        "lodash": "^4.17.14"
+      }
     },
     "async-listener": {
       "version": "0.6.10",
@@ -3375,8 +3378,7 @@
     "lodash": {
       "version": "4.17.15",
       "resolved": "https://registry.npmjs.org/lodash/-/lodash-4.17.15.tgz",
-      "integrity": "sha512-8xOcRHvCjnocdS5cpwXQXVzmmh5e5+saE2QGoeQmbKmRS6J3VQppPOIt0MnmE+4xlZoumy0GPG0D0MVIQbNA1A==",
-      "dev": true
+      "integrity": "sha512-8xOcRHvCjnocdS5cpwXQXVzmmh5e5+saE2QGoeQmbKmRS6J3VQppPOIt0MnmE+4xlZoumy0GPG0D0MVIQbNA1A=="
     },
     "lodash.at": {
       "version": "4.6.0",
diff --git a/services/notifications/package.json b/services/notifications/package.json
index a6917bf054..830f575e1a 100644
--- a/services/notifications/package.json
+++ b/services/notifications/package.json
@@ -17,7 +17,7 @@
   "author": "",
   "license": "ISC",
   "dependencies": {
-    "async": "^0.1.22",
+    "async": "^2.6.3",
     "coffee-script": "^1.12.7",
     "express": "3.1.0",
     "logger-sharelatex": "^1.9.1",