diff --git a/apps/oauth2/package-lock.json b/apps/oauth2/package-lock.json
index 931cf10a31..cfef4e464e 100644
--- a/apps/oauth2/package-lock.json
+++ b/apps/oauth2/package-lock.json
@@ -968,9 +968,9 @@
       }
     },
     "css-loader": {
-      "version": "2.0.1",
-      "resolved": "https://registry.npmjs.org/css-loader/-/css-loader-2.0.1.tgz",
-      "integrity": "sha512-XIVwoIOzSFRVsafOKa060GJ/A70c0IP/C1oVPHEX4eHIFF39z0Jl7j8Kua1SUTiqWDupUnbY3/yQx9r7EUB35w==",
+      "version": "2.0.2",
+      "resolved": "https://registry.npmjs.org/css-loader/-/css-loader-2.0.2.tgz",
+      "integrity": "sha512-28hdCb5gCuTKUA+R6KzLwgxK6pUfgvrUyMNn7avOUQYFvmc13djru28uG+NF/pRre7Odd6B/kmJErCcpFZZQpQ==",
       "dev": true,
       "requires": {
         "icss-utils": "^4.0.0",
@@ -978,7 +978,7 @@
         "lodash": "^4.17.11",
         "postcss": "^7.0.6",
         "postcss-modules-extract-imports": "^2.0.0",
-        "postcss-modules-local-by-default": "^2.0.2",
+        "postcss-modules-local-by-default": "^2.0.3",
         "postcss-modules-scope": "^2.0.0",
         "postcss-modules-values": "^2.0.0",
         "postcss-value-parser": "^3.3.0",
@@ -1575,7 +1575,8 @@
         "ansi-regex": {
           "version": "2.1.1",
           "bundled": true,
-          "dev": true
+          "dev": true,
+          "optional": true
         },
         "aproba": {
           "version": "1.2.0",
@@ -1990,7 +1991,8 @@
         "safe-buffer": {
           "version": "5.1.1",
           "bundled": true,
-          "dev": true
+          "dev": true,
+          "optional": true
         },
         "safer-buffer": {
           "version": "2.1.2",
@@ -2046,6 +2048,7 @@
           "version": "3.0.1",
           "bundled": true,
           "dev": true,
+          "optional": true,
           "requires": {
             "ansi-regex": "^2.0.0"
           }
@@ -2089,12 +2092,14 @@
         "wrappy": {
           "version": "1.0.2",
           "bundled": true,
-          "dev": true
+          "dev": true,
+          "optional": true
         },
         "yallist": {
           "version": "3.0.2",
           "bundled": true,
-          "dev": true
+          "dev": true,
+          "optional": true
         }
       }
     },
@@ -3275,9 +3280,9 @@
       }
     },
     "postcss-modules-local-by-default": {
-      "version": "2.0.2",
-      "resolved": "https://registry.npmjs.org/postcss-modules-local-by-default/-/postcss-modules-local-by-default-2.0.2.tgz",
-      "integrity": "sha512-qghHvHeydUBQ3EQic5NjYryZ5jzXzAYxHR7lZQlCNmjGpJtINRyX/ELnh/7fxBBmHNkEzNkq2l5cV6trfidYng==",
+      "version": "2.0.3",
+      "resolved": "https://registry.npmjs.org/postcss-modules-local-by-default/-/postcss-modules-local-by-default-2.0.3.tgz",
+      "integrity": "sha512-jv4CQ8IQ0+TkaAIP7H4kgu/jQbrjte8xU61SYJAIOby+o3H0MGWX6eN1WXUKHccK6/EEjcAERjyIP8MXzAWAbQ==",
       "dev": true,
       "requires": {
         "css-selector-tokenizer": "^0.7.0",
diff --git a/apps/oauth2/package.json b/apps/oauth2/package.json
index 6b4afc9ba1..f8e25b2ff7 100644
--- a/apps/oauth2/package.json
+++ b/apps/oauth2/package.json
@@ -20,7 +20,7 @@
     "vue": "^2.5.21"
   },
   "devDependencies": {
-    "css-loader": "^2.0.1",
+    "css-loader": "^2.0.2",
     "file-loader": "^3.0.1",
     "vue-loader": "^15.4.2",
     "vue-template-compiler": "^2.5.21",