diff --git a/package.json b/package.json
index dc980421cf6962..2bfa6b581c02bd 100644
--- a/package.json
+++ b/package.json
@@ -132,7 +132,7 @@
     "tough-cookie": "4.0.0",
     "tunnel": "0.0.6",
     "twit": "2.2.11",
-    "winston": "3.6.0",
+    "winston": "3.7.1",
     "xml2js": "0.4.23"
   },
   "jest": {
diff --git a/yarn.lock b/yarn.lock
index ed4c341a8613f3..7a02c9eb3b4c87 100644
--- a/yarn.lock
+++ b/yarn.lock
@@ -14173,10 +14173,10 @@ winston-transport@^4.5.0:
     readable-stream "^3.6.0"
     triple-beam "^1.3.0"
 
-winston@3.6.0:
-  version "3.6.0"
-  resolved "https://registry.yarnpkg.com/winston/-/winston-3.6.0.tgz#be32587a099a292b88c49fac6fa529d478d93fb6"
-  integrity sha512-9j8T75p+bcN6D00sF/zjFVmPp+t8KMPB1MzbbzYjeN9VWxdsYnTB40TkbNUEXAmILEfChMvAMgidlX64OG3p6w==
+winston@3.7.1:
+  version "3.7.1"
+  resolved "https://registry.yarnpkg.com/winston/-/winston-3.7.1.tgz#1c1914c8f03ba76d6d882bacc831bac0f423aa18"
+  integrity sha512-qKLMQVWMOvY0h9H4BA8Sfh79+KdnKi8gsyCSvfQgc+6teSlq92j82WK+zAJc6fLbAA2jwQuqkANLpQeOFA4Kug==
   dependencies:
     "@dabh/diagnostics" "^2.0.2"
     async "^3.2.3"