diff --git a/api/package.json b/api/package.json
index b4bca72..84dda94 100644
--- a/api/package.json
+++ b/api/package.json
@@ -14,7 +14,7 @@
   "dependencies": {
     "@mapbox/mbtiles": "^0.9.0",
     "amqplib": "^0.5.2",
-    "async": "^2.6.0",
+    "async": "^3.2.2",
     "express": "^4.16.2",
     "joi": "^13.1.2",
     "knex": "^0.14.4",
diff --git a/api/yarn.lock b/api/yarn.lock
index a1bd137..237923b 100644
--- a/api/yarn.lock
+++ b/api/yarn.lock
@@ -166,11 +166,9 @@ async@^1.0.0:
   version "1.5.2"
   resolved "https://registry.yarnpkg.com/async/-/async-1.5.2.tgz#ec6a61ae56480c0c3cb241c95618e20892f9672a"
 
-async@^2.6.0:
-  version "2.6.0"
-  resolved "https://registry.yarnpkg.com/async/-/async-2.6.0.tgz#61a29abb6fcc026fea77e56d1c6ec53a795951f4"
-  dependencies:
-    lodash "^4.14.0"
+async@^3.2.2:
+  version "3.2.2"
+  resolved "https://registry.yarnpkg.com/async/-/async-3.2.2.tgz#2eb7671034bb2194d45d30e31e24ec7e7f9670cd"
 
 async@~2.5.0:
   version "2.5.0"
@@ -1620,11 +1618,7 @@ lodash.startswith@^4.0.1:
   version "4.2.1"
   resolved "https://registry.yarnpkg.com/lodash.startswith/-/lodash.startswith-4.2.1.tgz#c598c4adce188a27e53145731cdc6c0e7177600c"
 
-lodash@^4.14.0, lodash@^4.5.1:
-  version "4.17.4"
-  resolved "https://registry.yarnpkg.com/lodash/-/lodash-4.17.4.tgz#78203a4d1c328ae1d86dca6460e369b57f4055ae"
-
-lodash@^4.17.4:
+lodash@^4.14.0, lodash@^4.17.4, lodash@^4.5.1:
   version "4.17.5"
   resolved "https://registry.yarnpkg.com/lodash/-/lodash-4.17.5.tgz#99a92d65c0272debe8c96b6057bc8fbfa3bed511"