diff --git a/package-lock.json b/package-lock.json
index eab56f0c6..186ec81a5 100644
--- a/package-lock.json
+++ b/package-lock.json
@@ -2115,9 +2115,9 @@
       "dev": true
     },
     "cartocolor": {
-      "version": "4.0.0",
-      "resolved": "https://registry.npmjs.org/cartocolor/-/cartocolor-4.0.0.tgz",
-      "integrity": "sha1-hBoyIti1sicY2dVFseW5cssm6zY=",
+      "version": "4.0.2",
+      "resolved": "https://registry.npmjs.org/cartocolor/-/cartocolor-4.0.2.tgz",
+      "integrity": "sha512-+Gh9mb6lFxsDOLQlBLPxAHCnWXlg2W8q3AcVwqRcy95TdBbcOU89Wrb6h2Hd/6Ww1Kc1pzXmUdpnWD+xeCG0dg==",
       "requires": {
         "colorbrewer": "1.0.0"
       }
@@ -10269,9 +10269,9 @@
       }
     },
     "mustache": {
-      "version": "1.1.0",
-      "resolved": "https://registry.npmjs.org/mustache/-/mustache-1.1.0.tgz",
-      "integrity": "sha1-DZpVS0s/niSObCdCwledYY0v8A8="
+      "version": "2.2.1",
+      "resolved": "https://registry.npmjs.org/mustache/-/mustache-2.2.1.tgz",
+      "integrity": "sha1-LEDKIcJ49TFQaCvPkJDkGjM5uHY="
     },
     "mute-stream": {
       "version": "0.0.7",
@@ -14053,11 +14053,11 @@
       "optional": true
     },
     "turbo-carto": {
-      "version": "0.21.2",
-      "resolved": "https://registry.npmjs.org/turbo-carto/-/turbo-carto-0.21.2.tgz",
-      "integrity": "sha512-yUqc5V9U5UEVksMfNSlDOr03mHEQBa187iTM4nbTiOwViBVAo/ndW07INt2np9gin+YO8MFJjo7Ioo8lr+3xUQ==",
+      "version": "0.21.3",
+      "resolved": "https://registry.npmjs.org/turbo-carto/-/turbo-carto-0.21.3.tgz",
+      "integrity": "sha512-+eaRjoq9XhvU1U4XH5lvcBgA0P3gG7eVfCt/CUx+oqZP0kUV08kicLQeAZbmZpCYF5LYFwCppW7O1MCisnDQow==",
       "requires": {
-        "cartocolor": "4.0.0",
+        "cartocolor": "^4.0.2",
         "colorbrewer": "1.0.0",
         "debug": "^3.1.0",
         "es6-promise": "3.1.2",
diff --git a/package.json b/package.json
index b8a593c5d..5fc59dd59 100644
--- a/package.json
+++ b/package.json
@@ -43,7 +43,7 @@
     "d3-format": "1.2.0",
     "d3-time-format": "2.1.0",
     "jquery": "2.1.4",
-    "mustache": "1.1.0",
+    "mustache": "2.2.1",
     "perfect-scrollbar": "https://github.com/CartoDB/perfect-scrollbar.git#master",
     "postcss": "5.0.19",
     "promise-polyfill": "^6.1.0",