diff --git a/package.json b/package.json
index 3b7ab758..141931f2 100644
--- a/package.json
+++ b/package.json
@@ -33,7 +33,7 @@
     "body-parser": "^1.15.2",
     "bounce-handler": "^7.3.2-fork.2",
     "compression": "^1.6.2",
-    "config": "^1.21.0",
+    "config": "^1.24.0",
     "connect-flash": "^0.1.1",
     "connect-redis": "^3.1.0",
     "cookie-parser": "^1.4.3",
@@ -42,36 +42,36 @@
     "csv-parse": "^1.1.7",
     "escape-html": "^1.0.3",
     "express": "^4.14.0",
-    "express-session": "^1.14.1",
+    "express-session": "^1.14.2",
     "faker": "^3.1.0",
-    "feedparser": "^1.1.4",
+    "feedparser": "^1.1.5",
     "geoip-ultralight": "^0.1.4",
-    "handlebars": "^4.0.5",
-    "hbs": "^4.0.0",
+    "handlebars": "^4.0.6",
+    "hbs": "^4.0.1",
     "he": "^1.1.0",
     "html-to-text": "^2.1.3",
     "humanize": "0.0.9",
     "is-url": "^1.2.2",
     "isemail": "^2.2.1",
-    "jsdom": "^9.5.0",
-    "juice": "^3.0.0",
-    "libmime": "^2.1.0",
+    "jsdom": "^9.8.3",
+    "juice": "^4.0.2",
+    "libmime": "^3.0.0",
     "mkdirp": "^0.5.1",
-    "moment-timezone": "^0.5.5",
+    "moment-timezone": "^0.5.10",
     "morgan": "^1.7.0",
     "multer": "^1.2.0",
-    "mysql": "^2.11.1",
-    "nodemailer": "^2.6.0",
+    "mysql": "^2.12.0",
+    "nodemailer": "^2.7.0",
     "nodemailer-openpgp": "^1.0.2",
-    "npmlog": "^4.0.0",
-    "openpgp": "^2.3.3",
+    "npmlog": "^4.0.1",
+    "openpgp": "^2.3.5",
     "passport": "^0.3.2",
     "passport-local": "^1.0.0",
-    "request": "^2.74.0",
-    "serve-favicon": "^2.3.0",
+    "request": "^2.79.0",
+    "serve-favicon": "^2.3.2",
     "shortid": "^2.2.6",
     "slugify": "^1.0.2",
-    "smtp-server": "^1.14.2",
+    "smtp-server": "^1.16.1",
     "striptags": "^2.1.1",
     "toml": "^2.3.0"
   }