diff --git a/CHANGELOG.md b/CHANGELOG.md
index 1c6252ca..4d67c9bf 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -5,6 +5,12 @@ All notable changes to this project will be documented in this file.
 The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/),
 and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
 
+## [5.3.3] - 2023-04-20
+
+### Updated
+
+- Security patches for npm packages
+
 ## [5.3.2] - 2023-04-17
 
 ### Added
diff --git a/lambda/es-proxy-layer/package-lock.json b/lambda/es-proxy-layer/package-lock.json
index c055b1a9..5dddb1c5 100644
--- a/lambda/es-proxy-layer/package-lock.json
+++ b/lambda/es-proxy-layer/package-lock.json
@@ -14,7 +14,7 @@
         "handlebars": "^4.7.2",
         "linkifyjs": "^3.0.0-beta.3",
         "simple-encryptor": "^3.0.0",
-        "vm2": "^3.9.16"
+        "vm2": "^3.9.17"
       }
     },
     "node_modules/acorn": {
@@ -206,9 +206,9 @@
       }
     },
     "node_modules/vm2": {
-      "version": "3.9.16",
-      "resolved": "https://registry.npmjs.org/vm2/-/vm2-3.9.16.tgz",
-      "integrity": "sha512-3T9LscojNTxdOyG+e8gFeyBXkMlOBYDoF6dqZbj+MPVHi9x10UfiTAJIobuchRCp3QvC+inybTbMJIUrLsig0w==",
+      "version": "3.9.17",
+      "resolved": "https://registry.npmjs.org/vm2/-/vm2-3.9.17.tgz",
+      "integrity": "sha512-AqwtCnZ/ERcX+AVj9vUsphY56YANXxRuqMb7GsDtAr0m0PcQX3u0Aj3KWiXM0YAHy7i6JEeHrwOnwXbGYgRpAw==",
       "dependencies": {
         "acorn": "^8.7.0",
         "acorn-walk": "^8.2.0"
@@ -357,9 +357,9 @@
       "optional": true
     },
     "vm2": {
-      "version": "3.9.16",
-      "resolved": "https://registry.npmjs.org/vm2/-/vm2-3.9.16.tgz",
-      "integrity": "sha512-3T9LscojNTxdOyG+e8gFeyBXkMlOBYDoF6dqZbj+MPVHi9x10UfiTAJIobuchRCp3QvC+inybTbMJIUrLsig0w==",
+      "version": "3.9.17",
+      "resolved": "https://registry.npmjs.org/vm2/-/vm2-3.9.17.tgz",
+      "integrity": "sha512-AqwtCnZ/ERcX+AVj9vUsphY56YANXxRuqMb7GsDtAr0m0PcQX3u0Aj3KWiXM0YAHy7i6JEeHrwOnwXbGYgRpAw==",
       "requires": {
         "acorn": "^8.7.0",
         "acorn-walk": "^8.2.0"
diff --git a/lambda/es-proxy-layer/package.json b/lambda/es-proxy-layer/package.json
index a7997a88..c5f1dbfe 100644
--- a/lambda/es-proxy-layer/package.json
+++ b/lambda/es-proxy-layer/package.json
@@ -11,6 +11,6 @@
     "handlebars": "^4.7.2",
     "linkifyjs": "^3.0.0-beta.3",
     "simple-encryptor": "^3.0.0",
-    "vm2": "^3.9.16"
+    "vm2": "^3.9.17"
   }
 }
diff --git a/package-lock.json b/package-lock.json
index 8b8ae31b..2ca8acb0 100644
--- a/package-lock.json
+++ b/package-lock.json
@@ -1,12 +1,12 @@
 {
   "name": "qnabot-on-aws",
-  "version": "5.3.2",
+  "version": "5.3.3",
   "lockfileVersion": 2,
   "requires": true,
   "packages": {
     "": {
       "name": "qnabot-on-aws",
-      "version": "5.3.2",
+      "version": "5.3.3",
       "license": "SEE LICENSE IN LICENSE",
       "os": [
         "darwin",
diff --git a/package.json b/package.json
index 6b673300..15422ae9 100644
--- a/package.json
+++ b/package.json
@@ -1,6 +1,6 @@
 {
   "name": "qnabot-on-aws",
-  "version": "5.3.2",
+  "version": "5.3.3",
   "engines": {
     "node": ">=12.16.1",
     "npm": ">=7.8.0"