diff --git a/install/package.json b/install/package.json
index b5751d770d..e7a3de24dc 100644
--- a/install/package.json
+++ b/install/package.json
@@ -55,7 +55,7 @@
         "less": "^2.7.3",
         "lodash": "^4.17.10",
         "logrotate-stream": "^0.2.5",
-        "lru-cache": "4.1.1",
+        "lru-cache": "4.1.3",
         "material-design-lite": "^1.3.0",
         "mime": "^2.2.0",
         "mkdirp": "^0.5.1",
@@ -78,34 +78,34 @@
         "nodebb-theme-slick": "1.2.1",
         "nodebb-theme-vanilla": "10.0.4",
         "nodebb-widget-essentials": "4.0.4",
-        "nodemailer": "4.4.1",
+        "nodemailer": "4.6.4",
         "passport": "^0.4.0",
         "passport-local": "1.0.0",
-        "postcss": "6.0.15",
+        "postcss": "6.0.22",
         "postcss-clean": "1.1.0",
         "promise-polyfill": "^7.0.0",
         "prompt": "^1.0.0",
         "redis": "2.8.0",
-        "request": "2.83.0",
+        "request": "2.85.0",
         "rimraf": "2.6.2",
         "rss": "^1.2.2",
         "sanitize-html": "^1.16.3",
         "semver": "^5.4.1",
         "serve-favicon": "^2.4.5",
         "sitemap": "^1.13.0",
-        "socket.io": "2.0.4",
+        "socket.io": "2.1.0",
         "socket.io-adapter-mongo": "^2.0.1",
-        "socket.io-client": "2.0.4",
+        "socket.io-client": "2.1.0",
         "socket.io-redis": "5.2.0",
         "socketio-wildcard": "2.0.0",
         "spdx-license-list": "^4.0.0",
         "spider-detector": "1.0.18",
         "toobusy-js": "^0.5.1",
         "uglify-es": "^3.3.9",
-        "validator": "9.2.0",
+        "validator": "10.2.0",
         "winston": "^2.4.0",
         "xml": "^1.0.1",
-        "xregexp": "3.2.0",
+        "xregexp": "^4.1.1",
         "zxcvbn": "^4.4.2"
     },
     "devDependencies": {