diff --git a/package-lock.json b/package-lock.json
index b4164137..d94f5818 100644
--- a/package-lock.json
+++ b/package-lock.json
@@ -1,6 +1,6 @@
 {
   "name": "@puzzle-js/core",
-  "version": "3.60.0",
+  "version": "3.61.0",
   "lockfileVersion": 1,
   "requires": true,
   "dependencies": {
@@ -1086,9 +1086,9 @@
       "dev": true
     },
     "async": {
-      "version": "3.1.0",
-      "resolved": "https://registry.npmjs.org/async/-/async-3.1.0.tgz",
-      "integrity": "sha512-4vx/aaY6j/j3Lw3fbCHNWP0pPaTCew3F6F3hYyl/tHs/ndmV1q7NW9T5yuJ2XAGwdQrP+6Wu20x06U4APo/iQQ=="
+      "version": "3.2.2",
+      "resolved": "https://registry.npmjs.org/async/-/async-3.2.2.tgz",
+      "integrity": "sha512-H0E+qZaDEfx/FY4t7iLRv1W2fFI6+pyCeTw1uN20AQPiwqwM6ojPxHxdLv4z8hi2DtnW9BOckSspLucW7pIE5g=="
     },
     "async-limiter": {
       "version": "1.0.1",
diff --git a/package.json b/package.json
index 8db66962..918ac6b7 100644
--- a/package.json
+++ b/package.json
@@ -69,7 +69,7 @@
   "dependencies": {
     "@puzzle-js/client-lib": "^1.8.0",
     "@types/socket.io-client": "^1.4.32",
-    "async": "^3.0.1",
+    "async": "^3.2.2",
     "cheerio": "^1.0.0-rc.2",
     "clean-css": "^4.1.11",
     "compression": "^1.7.4",