diff --git a/package.json b/package.json
index 616ad63639..9633474e34 100644
--- a/package.json
+++ b/package.json
@@ -17,7 +17,7 @@
     "coveralls": "istanbul cover _mocha --report lcovonly -- -R dot && cat ./coverage/lcov.info | ./node_modules/coveralls/bin/coveralls.js && rm -rf ./coverage"
   },
   "dependencies": {
-    "async": "^2.1.4",
+    "async": "2.4.0",
     "ace-builds": "^1.2.6",
     "autoprefixer": "^6.2.3",
     "bcryptjs": "~2.3.0",
@@ -39,8 +39,8 @@
     "express": "^4.14.0",
     "express-session": "^1.8.2",
     "express-useragent": "1.0.7",
-    "html-to-text": "2.1.3",
-    "ip": "1.1.3",
+    "html-to-text": "3.2.0",
+    "ip": "1.1.5",
     "jimp": "0.2.27",
     "jquery": "^3.1.0",
     "json-2-csv": "^2.0.22",
@@ -50,7 +50,7 @@
     "mime": "^1.3.4",
     "minimist": "^1.1.1",
     "mkdirp": "~0.5.0",
-    "mongodb": "2.2.25",
+    "mongodb": "2.2.26",
     "morgan": "^1.3.2",
     "mousetrap": "^1.5.3",
     "nconf": "~0.8.2",
@@ -84,10 +84,10 @@
     "semver": "^5.1.0",
     "serve-favicon": "^2.1.5",
     "sitemap": "^1.4.0",
-    "socket.io": "1.7.2",
-    "socket.io-client": "1.7.2",
-    "socket.io-redis": "3.1.0",
-    "socketio-wildcard": "~0.3.0",
+    "socket.io": "1.7.4",
+    "socket.io-client": "1.7.4",
+    "socket.io-redis": "4.0.0",
+    "socketio-wildcard": "0.4.0",
     "string": "^3.0.0",
     "templates.js": "0.3.10",
     "toobusy-js": "^0.5.1",