diff --git a/nebtestkit/package-lock.json b/nebtestkit/package-lock.json
index bfabbdcc5..922964df1 100644
--- a/nebtestkit/package-lock.json
+++ b/nebtestkit/package-lock.json
@@ -133,9 +133,12 @@
       "dev": true
     },
     "async": {
-      "version": "1.5.2",
-      "resolved": "https://registry.npmjs.org/async/-/async-1.5.2.tgz",
-      "integrity": "sha1-7GphrlZIDAw8skHJVhjiCJL5Zyo="
+      "version": "2.6.4",
+      "resolved": "https://registry.npmjs.org/async/-/async-2.6.4.tgz",
+      "integrity": "sha512-mzo5dfJYwAn29PeiJ0zvwTo04zj8HDJj0Mn8TD7sno7q12prdbnasKJHhkm2c1LgrhlJ0teaea8860oxi51mGA==",
+      "requires": {
+        "lodash": "^4.17.14"
+      }
     },
     "asynckit": {
       "version": "0.4.0",
diff --git a/nebtestkit/package.json b/nebtestkit/package.json
index a98b0822a..763eb06df 100644
--- a/nebtestkit/package.json
+++ b/nebtestkit/package.json
@@ -18,7 +18,7 @@
     "command-exists": ">=1.2.4",
     "stringstream": ">=0.0.6",
     "cryptiles": "^4.1.2",
-    "async": "^1.5.2",
+    "async": "^2.6.4",
     "bignumber.js": "^5.0.0",
     "grpc": "^1.10.0",
     "lodash": ">=4.17.13",