diff --git a/package.json b/package.json
index 59166590f160a037b27c2288fc44f0994ca7035d..16eae015b7fcd3c662f9be4064e6a90e6d22c25f 100644
--- a/package.json
+++ b/package.json
@@ -109,7 +109,7 @@
     "tmp-promise": "1.0.5",
     "traverse": "0.6.6",
     "upath": "1.1.0",
-    "validator": "10.5.0",
+    "validator": "10.6.0",
     "vso-node-api": "6.5.0",
     "www-authenticate": "0.6.2",
     "yarn": "1.9.4"
diff --git a/yarn.lock b/yarn.lock
index cabf7349f7df07a2871b4ce7168299de6ecbd22b..d09b5691bfd19f579576008128eb1297de0747fc 100644
--- a/yarn.lock
+++ b/yarn.lock
@@ -7438,9 +7438,9 @@ validate-npm-package-name@^3.0.0, validate-npm-package-name@~3.0.0:
   dependencies:
     builtins "^1.0.3"
 
-validator@10.5.0:
-  version "10.5.0"
-  resolved "https://registry.yarnpkg.com/validator/-/validator-10.5.0.tgz#1debbe1e6f5fd0c920ed2af47516f3762033939c"
+validator@10.6.0:
+  version "10.6.0"
+  resolved "https://registry.yarnpkg.com/validator/-/validator-10.6.0.tgz#a9bdce685b3c3e8480e7ebbb9eb95c54cd9733b0"
 
 "vasync@1.x >=1.6.1":
   version "1.6.4"