diff --git a/apps/oauth2/package-lock.json b/apps/oauth2/package-lock.json
index d1c40f698e..3059700347 100644
--- a/apps/oauth2/package-lock.json
+++ b/apps/oauth2/package-lock.json
@@ -4347,9 +4347,9 @@
       }
     },
     "vue": {
-      "version": "2.5.19",
-      "resolved": "https://registry.npmjs.org/vue/-/vue-2.5.19.tgz",
-      "integrity": "sha512-zs7w/dy/yMTCcUunUl05UHhYEI2bt67R7G2jD42HnJ28JxCtC1FY8zZ9GU4PF2SJP8Ff/B9HyojWk/NztqKfFA=="
+      "version": "2.5.20",
+      "resolved": "https://registry.npmjs.org/vue/-/vue-2.5.20.tgz",
+      "integrity": "sha512-kVLZi8RWOk8qwAt+a0bVDy9VV5Zzcnj0fLCMyKLx1dmEBjqmYJYRWHvPwiypiJBtJkdmROy5NP5hyDqTdfBcvQ=="
     },
     "vue-hot-reload-api": {
       "version": "2.3.1",
diff --git a/apps/oauth2/package.json b/apps/oauth2/package.json
index 3b029716d6..13e287d7fb 100644
--- a/apps/oauth2/package.json
+++ b/apps/oauth2/package.json
@@ -17,7 +17,7 @@
   },
   "dependencies": {
     "nextcloud-axios": "^0.1.3",
-    "vue": "^2.5.19"
+    "vue": "^2.5.20"
   },
   "devDependencies": {
     "css-loader": "^2.0.0",