diff --git a/dependabot-sandbox/package-lock.json b/dependabot-sandbox/package-lock.json
index 1e43d6f0..c10b9982 100644
--- a/dependabot-sandbox/package-lock.json
+++ b/dependabot-sandbox/package-lock.json
@@ -8,7 +8,7 @@
       "name": "dependabot-severity-filter-sandbox",
       "version": "0.0.0",
       "dependencies": {
-        "brace-expansion": "1.1.11",
+        "brace-expansion": "1.1.21",
         "lodash": "4.17.11"
       }
     },
@@ -19,9 +19,9 @@
       "license": "MIT"
     },
     "node_modules/brace-expansion": {
-      "version": "1.1.11",
-      "resolved": "https://registry.npmjs.org/brace-expansion/-/brace-expansion-1.1.11.tgz",
-      "integrity": "sha512-iCuPHDFgrHX7H2vEI/5xpz07zSHB00TpugqhmYtVmMO6518mCuRMoOYFldEBl0g187ufozdaHgWKcYFb61qGiA==",
+      "version": "1.1.21",
+      "resolved": "https://registry.npmjs.org/brace-expansion/-/brace-expansion-1.1.21.tgz",
+      "integrity": "sha512-9zeA+KLZNNzglF2TPKRQEDyx6Yby7daAkuy8MiPzpXPsYDWi/DRM8jmwUDxokQjYqBpv5DgPiwD4h4ZZSy1Ujw==",
       "license": "MIT",
       "dependencies": {
         "balanced-match": "^1.0.0",
diff --git a/dependabot-sandbox/package.json b/dependabot-sandbox/package.json
index c5347041..8b38d04d 100644
--- a/dependabot-sandbox/package.json
+++ b/dependabot-sandbox/package.json
@@ -5,6 +5,6 @@
   "description": "Temporary fixture: vulnerable dependencies used to exercise the Dependabot severity filter workflow. Removed after the test.",
   "dependencies": {
     "lodash": "4.17.11",
-    "brace-expansion": "1.1.11"
+    "brace-expansion": "1.1.21"
   }
 }