diff --git a/package-lock.json b/package-lock.json
index 5e30141..587bc1c 100644
--- a/package-lock.json
+++ b/package-lock.json
@@ -381,9 +381,9 @@
       }
     },
     "node_modules/feedparser": {
-      "version": "2.2.10",
-      "resolved": "https://registry.npmjs.org/feedparser/-/feedparser-2.2.10.tgz",
-      "integrity": "sha512-WoAOooa61V8/xuKMi2pEtK86qQ3ZH/M72EEGdqlOTxxb3m6ve1NPvZcmPFs3wEDfcBbFLId2GqZ4YjsYi+h1xA==",
+      "version": "2.6.0",
+      "resolved": "https://registry.npmjs.org/feedparser/-/feedparser-2.6.0.tgz",
+      "integrity": "sha512-NapiVhyl7kwVOPPgBo/BIXRyZavHl12wlFZYfbrU3RjVjX7Hj6eiBeQQr+LLbsZdgOZ9eMZSMUZvKDNczAbGlw==",
       "license": "MIT",
       "dependencies": {
         "addressparser": "^1.0.1",
@@ -394,7 +394,7 @@
         "lodash.uniq": "^4.5.0",
         "mri": "^1.1.5",
         "readable-stream": "^2.3.7",
-        "sax": "^1.2.4"
+        "sax": ">=1.2.4 <1.4.4"
       },
       "bin": {
         "feedparser": "bin/feedparser.js"