diff --git a/react/package.json b/react/package.json
index b392ec8c2..589ae5f93 100644
--- a/react/package.json
+++ b/react/package.json
@@ -46,7 +46,7 @@
     "simple-element-resize-detector": "^1.3.0",
     "streamsaver": "^2.0.3",
     "text-encoding": "^0.7.0",
-    "url-parse": "^1.4.3",
+    "url-parse": "^1.5.9",
     "vtex.ajv": "^6.10.4",
     "web-streams-polyfill": "^2.0.6"
   },
diff --git a/react/yarn.lock b/react/yarn.lock
index 6b8fa2ba0..f16595660 100644
--- a/react/yarn.lock
+++ b/react/yarn.lock
@@ -8414,10 +8414,10 @@ urix@^0.1.0:
   resolved "https://registry.yarnpkg.com/urix/-/urix-0.1.0.tgz#da937f7a62e21fec1fd18d49b35c2935067a6c72"
   integrity sha1-2pN/emLiH+wf0Y1Js1wpNQZ6bHI=
 
-url-parse@^1.4.3:
-  version "1.4.7"
-  resolved "https://registry.yarnpkg.com/url-parse/-/url-parse-1.4.7.tgz#a8a83535e8c00a316e403a5db4ac1b9b853ae278"
-  integrity sha512-d3uaVyzDB9tQoSXFvuSUNFibTd9zxd2bkVrDRvF5TmvWWQwqE4lgYJ5m+x1DbecWkw+LK4RNl2CU1hHuOKPVlg==
+url-parse@^1.5.9:
+  version "1.5.9"
+  resolved "https://registry.yarnpkg.com/url-parse/-/url-parse-1.5.9.tgz#05ff26484a0b5e4040ac64dcee4177223d74675e"
+  integrity sha512-HpOvhKBvre8wYez+QhHcYiVvVmeF6DVnuSOOPhe3cTum3BnqHhvKaZm8FU5yTiOu/Jut2ZpB2rA/SbBA1JIGlQ==
   dependencies:
     querystringify "^2.1.1"
     requires-port "^1.0.0"