diff --git a/package.json b/package.json
index f9da3820d615bbba28bf0cef1f07c08f6e2a3932..235a90bb4a8c311a548e8401851be11757c9e15b 100644
--- a/package.json
+++ b/package.json
@@ -109,7 +109,7 @@
     "tmp-promise": "1.0.5",
     "traverse": "0.6.6",
     "upath": "1.1.0",
-    "validator": "10.6.0",
+    "validator": "10.7.0",
     "vso-node-api": "6.5.0",
     "www-authenticate": "0.6.2",
     "yarn": "1.9.4"
diff --git a/yarn.lock b/yarn.lock
index 9dabf745a38a33baab09a56e4b94a350f41a21d6..055e6a4fa8971b852643933c96f6191dc4721774 100644
--- a/yarn.lock
+++ b/yarn.lock
@@ -7425,9 +7425,9 @@ validate-npm-package-name@^3.0.0, validate-npm-package-name@~3.0.0:
   dependencies:
     builtins "^1.0.3"
 
-validator@10.6.0:
-  version "10.6.0"
-  resolved "https://registry.yarnpkg.com/validator/-/validator-10.6.0.tgz#a9bdce685b3c3e8480e7ebbb9eb95c54cd9733b0"
+validator@10.7.0:
+  version "10.7.0"
+  resolved "https://registry.yarnpkg.com/validator/-/validator-10.7.0.tgz#2d6443badcf942c86c19dc3deac7b87c0bd9b60d"
 
 "vasync@1.x >=1.6.1":
   version "1.6.4"