diff --git a/package-lock.json b/package-lock.json
index 266eeaef0..2da2e5f0c 100644
--- a/package-lock.json
+++ b/package-lock.json
@@ -1257,6 +1257,13 @@
 			"requires": {
 				"@nextcloud/event-bus": "^1.1.3",
 				"core-js": "3.6.4"
+			},
+			"dependencies": {
+				"core-js": {
+					"version": "3.6.4",
+					"resolved": "https://registry.npmjs.org/core-js/-/core-js-3.6.4.tgz",
+					"integrity": "sha512-4paDGScNgZP2IXXilaffL9X7968RuvwlkK3xWtZRVqgd8SYNiVKRJvkFd1aqqEuPfN7E68ZHEp9hDj6lHj4Hyw=="
+				}
 			}
 		},
 		"@nextcloud/axios": {
@@ -1334,6 +1341,13 @@
 			"integrity": "sha512-9cGPGZx9P3G/piM3vD8/W37DFcjj4UDUIb9BiKdAG3Ir+7+iI0O/kv7SzvVrEU74a1ohp+wmDUiEQjM02cSFRQ==",
 			"requires": {
 				"core-js": "3.6.4"
+			},
+			"dependencies": {
+				"core-js": {
+					"version": "3.6.4",
+					"resolved": "https://registry.npmjs.org/core-js/-/core-js-3.6.4.tgz",
+					"integrity": "sha512-4paDGScNgZP2IXXilaffL9X7968RuvwlkK3xWtZRVqgd8SYNiVKRJvkFd1aqqEuPfN7E68ZHEp9hDj6lHj4Hyw=="
+				}
 			}
 		},
 		"@nextcloud/vue": {
@@ -2946,9 +2960,9 @@
 			"integrity": "sha1-Z29us8OZl8LuGsOpJP1hJHSPV40="
 		},
 		"core-js": {
-			"version": "3.6.4",
-			"resolved": "https://registry.npmjs.org/core-js/-/core-js-3.6.4.tgz",
-			"integrity": "sha512-4paDGScNgZP2IXXilaffL9X7968RuvwlkK3xWtZRVqgd8SYNiVKRJvkFd1aqqEuPfN7E68ZHEp9hDj6lHj4Hyw=="
+			"version": "3.6.5",
+			"resolved": "https://registry.npmjs.org/core-js/-/core-js-3.6.5.tgz",
+			"integrity": "sha512-vZVEEwZoIsI+vPEuoF9Iqf5H7/M3eeQqWlQnYa8FSKKePuYTf5MWnxb5SDAzCa60b3JBRS5g9b+Dq7b1y/RCrA=="
 		},
 		"core-js-compat": {
 			"version": "3.6.5",
@@ -7478,15 +7492,6 @@
 				"find-up": "^3.0.0"
 			}
 		},
-		"pkg-up": {
-			"version": "3.1.0",
-			"resolved": "https://registry.npmjs.org/pkg-up/-/pkg-up-3.1.0.tgz",
-			"integrity": "sha512-nDywThFk1i4BQK4twPQ6TA4RT8bDY96yeuCVBWL3ePARCiEKDRSrNGbFIgUJpLp+XeIR65v8ra7WuJOFUBtkMA==",
-			"dev": true,
-			"requires": {
-				"find-up": "^3.0.0"
-			}
-		},
 		"popper.js": {
 			"version": "1.16.1",
 			"resolved": "https://registry.npmjs.org/popper.js/-/popper.js-1.16.1.tgz",
diff --git a/package.json b/package.json
index 742f80dbd..b06c7610a 100644
--- a/package.json
+++ b/package.json
@@ -39,7 +39,7 @@
 		"@nextcloud/router": "^1.0.2",
 		"@nextcloud/vue": "^1.4.1",
 		"camelcase": "^5.3.1",
-		"core-js": "^3.6.4",
+		"core-js": "^3.6.5",
 		"debounce": "^1.2.0",
 		"path-posix": "^1.0.0",
 		"qs": "^6.9.3",