diff --git a/package.json b/package.json
index 0297504..556a247 100644
--- a/package.json
+++ b/package.json
@@ -13,7 +13,7 @@
     "babel-preset-stage-0": "^6.5.0",
     "botkit": "^0.2.0",
     "html-entities": "^2.0.4",
-    "vm2": "^3.9.2"
+    "vm2": "^3.9.4"
   },
   "devDependencies": {},
   "scripts": {
diff --git a/yarn.lock b/yarn.lock
index 564153d..08c0718 100644
--- a/yarn.lock
+++ b/yarn.lock
@@ -2614,10 +2614,10 @@ verror@1.10.0:
     core-util-is "1.0.2"
     extsprintf "^1.2.0"
 
-vm2@^3.9.2:
-  version "3.9.2"
-  resolved "https://registry.yarnpkg.com/vm2/-/vm2-3.9.2.tgz#a4085d2d88a808a1b3c06d5478c2db3222a9cc30"
-  integrity sha512-nzyFmHdy2FMg7mYraRytc2jr4QBaUY3TEGe3q3bK8EgS9WC98wxn2jrPxS/ruWm+JGzrEIIeufKweQzVoQEd+Q==
+vm2@^3.9.4:
+  version "3.9.4"
+  resolved "https://registry.yarnpkg.com/vm2/-/vm2-3.9.4.tgz#2e118290fefe7bd8ea09ebe2f5faf53730dbddaa"
+  integrity sha512-sOdharrJ7KEePIpHekiWaY1DwgueuiBeX/ZBJUPgETsVlJsXuEx0K0/naATq2haFvJrvZnRiORQRubR0b7Ye6g==
 
 ware@^1.3.0:
   version "1.3.0"