diff --git a/amp-concert/package-lock.json b/amp-concert/package-lock.json
index 0ff0fd4a9..8b5dc7195 100644
--- a/amp-concert/package-lock.json
+++ b/amp-concert/package-lock.json
@@ -2839,9 +2839,9 @@
       }
     },
     "cuid": {
-      "version": "2.1.4",
-      "resolved": "https://registry.npmjs.org/cuid/-/cuid-2.1.4.tgz",
-      "integrity": "sha512-l1vrCiWOwBpu85bfm939Hg3MQh2alxAMoGZnjcJOYkgN7wzy9yi3vQhRzwcTr9mdIlfTp8DP9G5ZgIIPyaQEvg=="
+      "version": "2.1.8",
+      "resolved": "https://registry.npmjs.org/cuid/-/cuid-2.1.8.tgz",
+      "integrity": "sha512-xiEMER6E7TlTPnDxrM4eRiC6TRgjNX9xzEZ5U/Se2YJKr7Mq4pJn/2XEHjl3STcSh96GmkHPcBXLES8M29wyyg=="
     },
     "damerau-levenshtein": {
       "version": "1.0.4",
diff --git a/amp-concert/package.json b/amp-concert/package.json
index f7055c634..a93ab60f8 100644
--- a/amp-concert/package.json
+++ b/amp-concert/package.json
@@ -17,7 +17,7 @@
     "busboy": "0.2.14",
     "classnames": "2.2.6",
     "cookies": "0.7.3",
-    "cuid": "2.1.4",
+    "cuid": "2.1.8",
     "doasync": "2.0.1",
     "fast-glob": "2.2.6",
     "fuse.js": "3.3.0",