diff --git a/install/package.json b/install/package.json
index 97f14c4fd2..c2d5460eae 100644
--- a/install/package.json
+++ b/install/package.json
@@ -28,41 +28,41 @@
         ]
     },
     "dependencies": {
-        "@adactive/bootstrap-tagsinput": "^0.8.2",
-        "ace-builds": "^1.4.12",
-        "archiver": "^5.2.0",
-        "async": "^3.2.0",
+        "@adactive/bootstrap-tagsinput": "0.8.2",
+        "ace-builds": "1.4.13",
+        "archiver": "5.3.0",
+        "async": "3.2.3",
         "autoprefixer": "10.4.2",
         "bcryptjs": "2.4.3",
         "benchpressjs": "2.4.3",
-        "body-parser": "^1.19.0",
+        "body-parser": "1.19.1",
         "bootbox": "5.5.2",
-        "bootstrap": "^3.4.1",
-        "chart.js": "^2.9.4",
-        "cli-graph": "^3.2.2",
-        "clipboard": "^2.0.6",
+        "bootstrap": "3.4.1",
+        "chart.js": "2.9.4",
+        "cli-graph": "3.2.2",
+        "clipboard": "2.0.8",
         "colors": "1.4.0",
-        "commander": "^7.1.0",
+        "commander": "7.2.0",
         "compare-versions": "4.1.2",
-        "compression": "^1.7.4",
-        "connect-flash": "^0.1.1",
+        "compression": "1.7.4",
+        "connect-flash": "0.1.1",
         "connect-mongo": "4.6.0",
-        "connect-multiparty": "^2.2.0",
-        "connect-pg-simple": "^7.0.0",
+        "connect-multiparty": "2.2.0",
+        "connect-pg-simple": "7.0.0",
         "connect-redis": "6.0.0",
-        "cookie-parser": "^1.4.5",
-        "cron": "^1.8.2",
-        "cropperjs": "^1.5.11",
-        "csurf": "^1.11.0",
-        "daemon": "^1.1.0",
-        "diff": "^5.0.0",
-        "express": "^4.17.1",
-        "express-session": "^1.17.1",
-        "express-useragent": "^1.0.15",
-        "graceful-fs": "^4.2.6",
-        "helmet": "^4.4.1",
+        "cookie-parser": "1.4.6",
+        "cron": "1.8.2",
+        "cropperjs": "1.5.12",
+        "csurf": "1.11.0",
+        "daemon": "1.1.0",
+        "diff": "5.0.0",
+        "express": "4.17.2",
+        "express-session": "1.17.2",
+        "express-useragent": "1.0.15",
+        "graceful-fs": "4.2.9",
+        "helmet": "4.6.0",
         "html-to-text": "8.1.0",
-        "ipaddr.js": "^2.0.0",
+        "ipaddr.js": "2.0.1",
         "jquery": "3.6.0",
         "jquery-deserialize": "2.0.0",
         "jquery-form": "4.3.0",
@@ -70,23 +70,23 @@
         "jquery-ui": "1.13.0",
         "jsesc": "3.0.2",
         "json2csv": "5.0.6",
-        "jsonwebtoken": "^8.5.1",
-        "less": "^3.11.1",
-        "lodash": "^4.17.21",
-        "logrotate-stream": "^0.2.7",
+        "jsonwebtoken": "8.5.1",
+        "less": "3.13.1",
+        "lodash": "4.17.21",
+        "logrotate-stream": "0.2.8",
         "lru-cache": "6.0.0",
-        "material-design-lite": "^1.3.0",
-        "mime": "^3.0.0",
-        "mkdirp": "^1.0.4",
+        "material-design-lite": "1.3.0",
+        "mime": "3.0.0",
+        "mkdirp": "1.0.4",
         "mongodb": "4.3.0",
-        "morgan": "^1.10.0",
-        "mousetrap": "^1.6.5",
+        "morgan": "1.10.0",
+        "mousetrap": "1.6.5",
         "multiparty": "4.2.2",
         "@nodebb/bootswatch": "3.4.2",
-        "nconf": "^0.11.2",
+        "nconf": "0.11.3",
         "nodebb-plugin-composer-default": "7.0.17",
         "nodebb-plugin-dbsearch": "5.1.1",
-        "nodebb-plugin-emoji": "^3.5.4",
+        "nodebb-plugin-emoji": "3.5.4",
         "nodebb-plugin-emoji-android": "2.0.5",
         "nodebb-plugin-markdown": "8.14.5",
         "nodebb-plugin-mentions": "3.0.4",
@@ -97,48 +97,48 @@
         "nodebb-theme-slick": "1.4.23",
         "nodebb-theme-vanilla": "12.1.15",
         "nodebb-widget-essentials": "5.0.4",
-        "nodemailer": "^6.5.0",
+        "nodemailer": "6.7.2",
         "nprogress": "0.2.0",
-        "passport": "^0.5.0",
-        "passport-http-bearer": "^1.0.1",
+        "passport": "0.5.2",
+        "passport-http-bearer": "1.0.1",
         "passport-local": "1.0.0",
-        "pg": "^8.7.1",
-        "pg-cursor": "^2.7.1",
+        "pg": "8.7.1",
+        "pg-cursor": "2.7.1",
         "postcss": "8.4.5",
         "postcss-clean": "1.2.0",
-        "prompt": "^1.1.0",
+        "prompt": "1.2.1",
         "ioredis": "4.28.2",
         "request": "2.88.2",
-        "request-promise-native": "^1.0.9",
+        "request-promise-native": "1.0.9",
         "requirejs": "2.3.6",
         "rimraf": "3.0.2",
-        "rss": "^1.2.2",
-        "sanitize-html": "^2.3.2",
-        "semver": "^7.3.4",
-        "serve-favicon": "^2.5.0",
+        "rss": "1.2.2",
+        "sanitize-html": "2.6.1",
+        "semver": "7.3.5",
+        "serve-favicon": "2.5.0",
         "sharp": "0.29.3",
-        "sitemap": "^7.0.0",
+        "sitemap": "7.1.0",
         "slideout": "1.0.1",
         "socket.io": "4.4.1",
         "socket.io-adapter-cluster": "1.0.1",
         "socket.io-client": "4.4.1",
         "@socket.io/redis-adapter": "7.1.0",
         "sortablejs": "1.14.0",
-        "spdx-license-list": "^6.4.0",
+        "spdx-license-list": "6.4.0",
         "spider-detector": "2.0.0",
-        "textcomplete": "^0.18.0",
-        "textcomplete.contenteditable": "^0.1.1",
-        "timeago": "^1.6.7",
+        "textcomplete": "0.18.2",
+        "textcomplete.contenteditable": "0.1.1",
+        "timeago": "1.6.7",
         "tinycon": "0.6.8",
-        "toobusy-js": "^0.5.1",
-        "uglify-es": "^3.3.9",
+        "toobusy-js": "0.5.1",
+        "uglify-es": "3.3.9",
         "validator": "13.7.0",
         "visibilityjs": "2.0.2",
         "winston": "3.3.4",
-        "xml": "^1.0.1",
-        "xregexp": "^5.0.1",
+        "xml": "1.0.1",
+        "xregexp": "5.1.0",
         "yargs": "17.3.1",
-        "zxcvbn": "^4.4.2"
+        "zxcvbn": "4.4.2"
     },
     "devDependencies": {
         "@apidevtools/swagger-parser": "10.0.3",
@@ -163,7 +163,7 @@
         "url": "https://github.com/NodeBB/NodeBB/issues"
     },
     "engines": {
-        "node": ">=12"
+        "node": "17.3.1"
     },
     "maintainers": [
         {