diff --git a/package.json b/package.json
index 0f45abf503..d0c09a946d 100644
--- a/package.json
+++ b/package.json
@@ -46,7 +46,7 @@
     "semver": "^5.1.0",
     "ssri": "^5.3.0",
     "strip-ansi": "^4.0.0",
-    "strip-bom": "^3.0.0",
+    "strip-bom": "^5.0.0",
     "tar-fs": "^1.16.0",
     "tar-stream": "^1.6.1",
     "uuid": "^3.0.1",
diff --git a/yarn.lock b/yarn.lock
index fe1b1cd3f8..bce2d38485 100644
--- a/yarn.lock
+++ b/yarn.lock
@@ -7063,6 +7063,11 @@ strip-bom@^2.0.0:
   dependencies:
     is-utf8 "^0.2.0"
 
+strip-bom@^5.0.0:
+  version "5.0.0"
+  resolved "https://registry.yarnpkg.com/strip-bom/-/strip-bom-5.0.0.tgz#88d2e135d154dca7a5e06b4a4ba9653b6bdc0dd2"
+  integrity sha512-p+byADHF7SzEcVnLvc/r3uognM1hUhObuHXxJcgLCfD194XAkaLbjq3Wzb0N5G2tgIjH0dgT708Z51QxMeu60A==
+
 strip-eof@^1.0.0:
   version "1.0.0"
   resolved "https://registry.yarnpkg.com/strip-eof/-/strip-eof-1.0.0.tgz#bb43ff5598a6eb05d89b59fcd129c983313606bf"