diff --git a/package-lock.json b/package-lock.json
index 788ca35c..c80cf597 100644
--- a/package-lock.json
+++ b/package-lock.json
@@ -397,7 +397,6 @@
       "version": "1.0.2",
       "resolved": "https://registry.npmjs.org/bcrypt-pbkdf/-/bcrypt-pbkdf-1.0.2.tgz",
       "integrity": "sha1-pDAdOJtqQ/m2f/PKEaP2Y342Dp4=",
-      "optional": true,
       "requires": {
         "tweetnacl": "^0.14.3"
       }
@@ -7739,20 +7738,20 @@
       "dev": true
     },
     "ssh2": {
-      "version": "0.6.1",
-      "resolved": "https://registry.npmjs.org/ssh2/-/ssh2-0.6.1.tgz",
-      "integrity": "sha512-fNvocq+xetsaAZtBG/9Vhh0GDjw1jQeW7Uq/DPh4fVrJd0XxSfXAqBjOGVk4o2jyWHvyC6HiaPFpfHlR12coDw==",
+      "version": "0.8.7",
+      "resolved": "https://registry.npmjs.org/ssh2/-/ssh2-0.8.7.tgz",
+      "integrity": "sha512-/u1BO12kb0lDVxJXejWB9pxyF3/ncgRqI9vPCZuPzo05pdNDzqUeQRavScwSPsfMGK+5H/VRqp1IierIx0Bcxw==",
       "requires": {
-        "ssh2-streams": "~0.2.0"
+        "ssh2-streams": "~0.4.8"
       }
     },
     "ssh2-streams": {
-      "version": "0.2.1",
-      "resolved": "https://registry.npmjs.org/ssh2-streams/-/ssh2-streams-0.2.1.tgz",
-      "integrity": "sha512-3zCOsmunh1JWgPshfhKmBCL3lUtHPoh+a/cyQ49Ft0Q0aF7xgN06b76L+oKtFi0fgO57FLjFztb1GlJcEZ4a3Q==",
+      "version": "0.4.8",
+      "resolved": "https://registry.npmjs.org/ssh2-streams/-/ssh2-streams-0.4.8.tgz",
+      "integrity": "sha512-auxXfgYySz2vYw7TMU7PK7vFI7EPvhvTH8/tZPgGaWocK4p/vwCMiV3icz9AEkb0R40kOKZtFtqYIxDJyJiytw==",
       "requires": {
         "asn1": "~0.2.0",
-        "semver": "^5.1.0",
+        "bcrypt-pbkdf": "^1.0.2",
         "streamsearch": "~0.1.2"
       }
     },
diff --git a/package.json b/package.json
index c1a11251..b9ed848f 100644
--- a/package.json
+++ b/package.json
@@ -73,7 +73,7 @@
     "semver": "^5.5.0",
     "sha.js": "^2.4.11",
     "shell-escape": "^0.2.0",
-    "ssh2": "^0.6.1",
+    "ssh2": "^0.8.7",
     "sshpk": "^1.14.2",
     "stream-to-buffer": "^0.1.0",
     "t2-progress": "^1.4.0",