diff --git a/packages/server/package.json b/packages/server/package.json
index eb4b401c8..a43f54566 100644
--- a/packages/server/package.json
+++ b/packages/server/package.json
@@ -32,7 +32,7 @@
     "connect-redis": "^3.3.3",
     "csurf": "^1.9.0",
     "dotenv": "^6.0.0",
-    "envfile": "^2.3.0",
+    "envfile": "^3.0.0",
     "errorhandler": "^1.5.0",
     "express": "^4.16.3",
     "express-flash": "0.0.2",
diff --git a/yarn.lock b/yarn.lock
index dc78189f8..91d0cc918 100644
--- a/yarn.lock
+++ b/yarn.lock
@@ -1754,11 +1754,11 @@ align-text@^0.1.1, align-text@^0.1.3:
     longest "^1.0.1"
     repeat-string "^1.5.2"
 
-ambi@^2.4.0:
-  version "2.5.0"
-  resolved "http://registry.npmjs.org/ambi/-/ambi-2.5.0.tgz#7c8e372be48891157e7cea01cb6f9143d1f74220"
+ambi@^5.0.0:
+  version "5.0.0"
+  resolved "https://registry.yarnpkg.com/ambi/-/ambi-5.0.0.tgz#7392e8f845d0f4dec37c3ecb2ab4a6b4c68b86c9"
   dependencies:
-    editions "^1.1.1"
+    editions "^2.1.0"
     typechecker "^4.3.0"
 
 amdefine@>=0.0.4:
@@ -4547,16 +4547,16 @@ ecdsa-sig-formatter@1.0.10:
   dependencies:
     safe-buffer "^5.0.1"
 
-editions@^1.1.1, editions@^1.3.3, editions@^1.3.4:
+editions@^1.1.1:
   version "1.3.4"
   resolved "https://registry.yarnpkg.com/editions/-/editions-1.3.4.tgz#3662cb592347c3168eb8e498a0ff73271d67f50b"
 
-editions@^2.0.2:
-  version "2.0.2"
-  resolved "https://registry.yarnpkg.com/editions/-/editions-2.0.2.tgz#54fdac6fb24b0a1a72ffc1ba0126c10602c3e0bd"
+editions@^2.0.2, editions@^2.1.0, editions@^2.1.2, editions@^2.1.3:
+  version "2.1.3"
+  resolved "https://registry.yarnpkg.com/editions/-/editions-2.1.3.tgz#727ccf3ec2c7b12dcc652c71000f16c4824d6f7d"
   dependencies:
-    errlop "^1.0.2"
-    semver "^5.5.0"
+    errlop "^1.1.1"
+    semver "^5.6.0"
 
 ee-first@1.1.1:
   version "1.1.1"
@@ -4660,24 +4660,24 @@ env-variable@0.0.x:
   version "0.0.4"
   resolved "https://registry.yarnpkg.com/env-variable/-/env-variable-0.0.4.tgz#0d6280cf507d84242befe35a512b5ae4be77c54e"
 
-envfile@^2.3.0:
-  version "2.3.0"
-  resolved "https://registry.yarnpkg.com/envfile/-/envfile-2.3.0.tgz#0ced8f8846e45e2868623c54ecfe3d1914b1e3f4"
+envfile@^3.0.0:
+  version "3.0.0"
+  resolved "https://registry.yarnpkg.com/envfile/-/envfile-3.0.0.tgz#7724a599d025b9af34757cc4ab0092f5d3fa2b53"
   dependencies:
-    ambi "^2.4.0"
+    ambi "^5.0.0"
     eachr "^3.1.0"
-    editions "^1.3.3"
+    editions "^2.1.3"
     typechecker "^4.0.1"
 
 err-code@^1.0.0:
   version "1.1.2"
   resolved "https://registry.yarnpkg.com/err-code/-/err-code-1.1.2.tgz#06e0116d3028f6aef4806849eb0ea6a748ae6960"
 
-errlop@^1.0.2:
-  version "1.0.3"
-  resolved "https://registry.yarnpkg.com/errlop/-/errlop-1.0.3.tgz#dba29c90cf832c3d2ce469fe515d7e5eef2c6676"
+errlop@^1.1.1:
+  version "1.1.1"
+  resolved "https://registry.yarnpkg.com/errlop/-/errlop-1.1.1.tgz#d9ae4c76c3e64956c5d79e6e035d6343bfd62250"
   dependencies:
-    editions "^1.3.4"
+    editions "^2.1.2"
 
 errno@^0.1.3, errno@~0.1.7:
   version "0.1.7"