diff --git a/package-lock.json b/package-lock.json
index 3143b45..5eea23e 100644
--- a/package-lock.json
+++ b/package-lock.json
@@ -19,13 +19,13 @@
         "monk": "^7.1.1",
         "morgan": "^1.9.1",
         "multer": "^1.4.5-lts.1",
-        "mustache-express": "latest",
+        "mustache-express": "*",
         "neuroweblab": "github:neuroanatomy/neuroweblab",
         "nwl-components": "^0.0.15",
-        "passport": "^0.4.0",
-        "passport-github": "latest",
+        "passport": "^0.6.0",
+        "passport-github": "*",
         "request": "^2.88.0",
-        "serve-favicon": "latest",
+        "serve-favicon": "*",
         "vue": "^3.2.31"
       },
       "devDependencies": {
@@ -5358,6 +5358,18 @@
         "saslprep": "^1.0.3"
       }
     },
+    "node_modules/neuroweblab/node_modules/passport": {
+      "version": "0.4.1",
+      "resolved": "https://registry.npmjs.org/passport/-/passport-0.4.1.tgz",
+      "integrity": "sha512-IxXgZZs8d7uFSt3eqNjM9NQ3g3uQCW5avD8mRNoXV99Yig50vjuaez6dQK2qC0kVWPRTujxY0dWgGfT09adjYg==",
+      "dependencies": {
+        "passport-strategy": "1.x.x",
+        "pause": "0.0.1"
+      },
+      "engines": {
+        "node": ">= 0.4.0"
+      }
+    },
     "node_modules/nise": {
       "version": "1.5.3",
       "dev": true,
@@ -5805,14 +5817,20 @@
       }
     },
     "node_modules/passport": {
-      "version": "0.4.1",
-      "license": "MIT",
+      "version": "0.6.0",
+      "resolved": "https://registry.npmjs.org/passport/-/passport-0.6.0.tgz",
+      "integrity": "sha512-0fe+p3ZnrWRW74fe8+SvCyf4a3Pb2/h7gFkQ8yTJpAO50gDzlfjZUZTO1k5Eg9kUct22OxHLqDZoKUWRHOh9ug==",
       "dependencies": {
         "passport-strategy": "1.x.x",
-        "pause": "0.0.1"
+        "pause": "0.0.1",
+        "utils-merge": "^1.0.1"
       },
       "engines": {
         "node": ">= 0.4.0"
+      },
+      "funding": {
+        "type": "github",
+        "url": "https://github.com/sponsors/jaredhanson"
       }
     },
     "node_modules/passport-github": {
@@ -11761,6 +11779,15 @@
             "saslprep": "^1.0.3",
             "socks": "^2.6.1"
           }
+        },
+        "passport": {
+          "version": "0.4.1",
+          "resolved": "https://registry.npmjs.org/passport/-/passport-0.4.1.tgz",
+          "integrity": "sha512-IxXgZZs8d7uFSt3eqNjM9NQ3g3uQCW5avD8mRNoXV99Yig50vjuaez6dQK2qC0kVWPRTujxY0dWgGfT09adjYg==",
+          "requires": {
+            "passport-strategy": "1.x.x",
+            "pause": "0.0.1"
+          }
         }
       }
     },
@@ -12076,10 +12103,13 @@
       }
     },
     "passport": {
-      "version": "0.4.1",
+      "version": "0.6.0",
+      "resolved": "https://registry.npmjs.org/passport/-/passport-0.6.0.tgz",
+      "integrity": "sha512-0fe+p3ZnrWRW74fe8+SvCyf4a3Pb2/h7gFkQ8yTJpAO50gDzlfjZUZTO1k5Eg9kUct22OxHLqDZoKUWRHOh9ug==",
       "requires": {
         "passport-strategy": "1.x.x",
-        "pause": "0.0.1"
+        "pause": "0.0.1",
+        "utils-merge": "^1.0.1"
       }
     },
     "passport-github": {
diff --git a/package.json b/package.json
index 04edb5f..421a04e 100644
--- a/package.json
+++ b/package.json
@@ -28,7 +28,7 @@
     "mustache-express": "latest",
     "neuroweblab": "github:neuroanatomy/neuroweblab",
     "nwl-components": "^0.0.15",
-    "passport": "^0.4.0",
+    "passport": "^0.6.0",
     "passport-github": "latest",
     "request": "^2.88.0",
     "serve-favicon": "latest",