diff --git a/appengine/pubsub/package.json b/appengine/pubsub/package.json
index 5b7e363c4b..05fcb831e8 100644
--- a/appengine/pubsub/package.json
+++ b/appengine/pubsub/package.json
@@ -16,7 +16,7 @@
     "@google-cloud/pubsub": "^0.22.0",
     "body-parser": "1.18.3",
     "express": "^4.16.3",
-    "pug": "^2.0.1",
+    "pug": "^3.0.1",
     "safe-buffer": "5.1.2"
   },
   "devDependencies": {