diff --git a/package-lock.json b/package-lock.json
index 48f89901..0f8f2f04 100644
--- a/package-lock.json
+++ b/package-lock.json
@@ -550,11 +550,11 @@
       }
     },
     "@shopify/koa-shopify-webhooks": {
-      "version": "2.6.0",
-      "resolved": "https://registry.npmjs.org/@shopify/koa-shopify-webhooks/-/koa-shopify-webhooks-2.6.0.tgz",
-      "integrity": "sha512-Q/8kRclQOV5/qhUN64wrtDdRuMfqROkxqE5dL2mVQXaPdKeeVNCe0Ditr3tOeln5cWC9yM/4LgXO+ZbeKYOv8g==",
+      "version": "2.6.3",
+      "resolved": "https://registry.npmjs.org/@shopify/koa-shopify-webhooks/-/koa-shopify-webhooks-2.6.3.tgz",
+      "integrity": "sha512-24NbE82AwVNil8bPM/NL2WQV+ygPPtG1nOi4LuPqiTpxZbrCUms96nsZeZzIHjqToxY7qR6fnzUxjWi2mTfiSg==",
       "requires": {
-        "@shopify/network": "^1.6.0",
+        "@shopify/network": "^1.6.3",
         "@types/koa": "^2.0.0",
         "koa-bodyparser": "^4.2.1",
         "koa-compose": ">=3.0.0 <4.0.0",
@@ -564,9 +564,9 @@
       },
       "dependencies": {
         "@shopify/network": {
-          "version": "1.6.0",
-          "resolved": "https://registry.npmjs.org/@shopify/network/-/network-1.6.0.tgz",
-          "integrity": "sha512-VT8277uw06VZRyPoOMXXQgpnxkwVTIQQkaO/t6pVSgr6prmyWj7qA7mEIjwb+TkTXrmrD10F3dPKpiqX87jYYg==",
+          "version": "1.6.3",
+          "resolved": "https://registry.npmjs.org/@shopify/network/-/network-1.6.3.tgz",
+          "integrity": "sha512-eR7fsyprdzybhSfoZsW94fF1do/iVebRYpG8LkUOD0tVTddFlbXA+ivbL1VZ+BqUjbYnwQ1OHDQ45CyPGpjGzw==",
           "requires": {
             "tslib": "^1.14.1"
           }
@@ -2021,7 +2021,6 @@
       "version": "1.0.2",
       "resolved": "https://registry.npmjs.org/call-bind/-/call-bind-1.0.2.tgz",
       "integrity": "sha512-7O+FbCihrB5WGbFYesctwmTKae6rOiIzmz1icreWJ+0aA7LJfuqhEso2T9ncpcFtzMQtzXf2QGGueWJGTYsqrA==",
-      "dev": true,
       "requires": {
         "function-bind": "^1.1.1",
         "get-intrinsic": "^1.0.2"
@@ -4284,8 +4283,7 @@
     "function-bind": {
       "version": "1.1.1",
       "resolved": "https://registry.npmjs.org/function-bind/-/function-bind-1.1.1.tgz",
-      "integrity": "sha512-yIovAzMX49sF8Yl58fSCWJ5svSLuaibPxXQJFLmBObTuCr0Mf1KiPopGM9NiFjiYBCbfaa2Fh6breQ6ANVTI0A==",
-      "dev": true
+      "integrity": "sha512-yIovAzMX49sF8Yl58fSCWJ5svSLuaibPxXQJFLmBObTuCr0Mf1KiPopGM9NiFjiYBCbfaa2Fh6breQ6ANVTI0A=="
     },
     "functional-red-black-tree": {
       "version": "1.0.1",
@@ -4335,7 +4333,6 @@
       "version": "1.0.2",
       "resolved": "https://registry.npmjs.org/get-intrinsic/-/get-intrinsic-1.0.2.tgz",
       "integrity": "sha512-aeX0vrFm21ILl3+JpFFRNe9aUvp6VFZb2/CTbgLb8j75kOhvoNYjt9d8KA/tJG4gSo8nzEDedRl0h7vDmBYRVg==",
-      "dev": true,
       "requires": {
         "function-bind": "^1.1.1",
         "has": "^1.0.3",
@@ -4345,8 +4342,7 @@
         "has-symbols": {
           "version": "1.0.1",
           "resolved": "https://registry.npmjs.org/has-symbols/-/has-symbols-1.0.1.tgz",
-          "integrity": "sha512-PLcsoqu++dmEIZB+6totNFKq/7Do+Z0u4oT0zKOJNl3lYK6vGwwu2hjHs+68OEZbTjiUE9bgOABXbP/GvrS0Kg==",
-          "dev": true
+          "integrity": "sha512-PLcsoqu++dmEIZB+6totNFKq/7Do+Z0u4oT0zKOJNl3lYK6vGwwu2hjHs+68OEZbTjiUE9bgOABXbP/GvrS0Kg=="
         }
       }
     },
@@ -4462,7 +4458,6 @@
       "version": "1.0.3",
       "resolved": "https://registry.npmjs.org/has/-/has-1.0.3.tgz",
       "integrity": "sha512-f2dvO0VU6Oej7RkWJGrehjbzMAjFp5/VKPp5tTpWIV4JHHZK1/BxbFRtf/siA2SWTe09caDmVtYYzWEIbBS4zw==",
-      "dev": true,
       "requires": {
         "function-bind": "^1.1.1"
       }
@@ -6497,8 +6492,7 @@
     "object-inspect": {
       "version": "1.9.0",
       "resolved": "https://registry.npmjs.org/object-inspect/-/object-inspect-1.9.0.tgz",
-      "integrity": "sha512-i3Bp9iTqwhaLZBxGkRfo5ZbE07BQRT7MGu8+nNgwW9ItGp1TzCTw2DLEoWwjClxBjOFI/hWljTAmYGCEwmtnOw==",
-      "dev": true
+      "integrity": "sha512-i3Bp9iTqwhaLZBxGkRfo5ZbE07BQRT7MGu8+nNgwW9ItGp1TzCTw2DLEoWwjClxBjOFI/hWljTAmYGCEwmtnOw=="
     },
     "object-keys": {
       "version": "1.1.0",
@@ -7292,9 +7286,12 @@
       "integrity": "sha512-XRsRjdf+j5ml+y/6GKHPZbrF/8p2Yga0JPtdqTIY2Xe5ohJPD9saDJJLPvp9+NSBprVvevdXZybnj2cv8OEd0A=="
     },
     "qs": {
-      "version": "6.9.4",
-      "resolved": "https://registry.npmjs.org/qs/-/qs-6.9.4.tgz",
-      "integrity": "sha512-A1kFqHekCTM7cz0udomYUoYNWjBebHm/5wzU/XqrBRBNWectVH0QIiN+NEcZ0Dte5hvzHwbr8+XQmguPhJ6WdQ=="
+      "version": "6.10.1",
+      "resolved": "https://registry.npmjs.org/qs/-/qs-6.10.1.tgz",
+      "integrity": "sha512-M528Hph6wsSVOBiYUnGf+K/7w0hNshs/duGsNXPUCLH5XAqjEtiPGwNONLV0tBH8NoGb0mvD5JubnUTrujKDTg==",
+      "requires": {
+        "side-channel": "^1.0.4"
+      }
     },
     "querystring": {
       "version": "0.2.0",
@@ -8023,7 +8020,6 @@
       "version": "1.0.4",
       "resolved": "https://registry.npmjs.org/side-channel/-/side-channel-1.0.4.tgz",
       "integrity": "sha512-q5XPytqFEIKHkGdiMIrY10mvLRvnQh42/+GoBlFW3b2LXLE2xxJpZFdm94we0BaoV3RwJyGqg5wS7epxTv0Zvw==",
-      "dev": true,
       "requires": {
         "call-bind": "^1.0.0",
         "get-intrinsic": "^1.0.2",
@@ -8034,7 +8030,6 @@
           "version": "1.0.2",
           "resolved": "https://registry.npmjs.org/get-intrinsic/-/get-intrinsic-1.0.2.tgz",
           "integrity": "sha512-aeX0vrFm21ILl3+JpFFRNe9aUvp6VFZb2/CTbgLb8j75kOhvoNYjt9d8KA/tJG4gSo8nzEDedRl0h7vDmBYRVg==",
-          "dev": true,
           "requires": {
             "function-bind": "^1.1.1",
             "has": "^1.0.3",
@@ -8044,8 +8039,7 @@
         "has-symbols": {
           "version": "1.0.1",
           "resolved": "https://registry.npmjs.org/has-symbols/-/has-symbols-1.0.1.tgz",
-          "integrity": "sha512-PLcsoqu++dmEIZB+6totNFKq/7Do+Z0u4oT0zKOJNl3lYK6vGwwu2hjHs+68OEZbTjiUE9bgOABXbP/GvrS0Kg==",
-          "dev": true
+          "integrity": "sha512-PLcsoqu++dmEIZB+6totNFKq/7Do+Z0u4oT0zKOJNl3lYK6vGwwu2hjHs+68OEZbTjiUE9bgOABXbP/GvrS0Kg=="
         }
       }
     },
diff --git a/package.json b/package.json
index 8470be22..d56f5f34 100644
--- a/package.json
+++ b/package.json
@@ -25,7 +25,7 @@
     "@shopify/app-bridge-react": "^1.28.0",
     "@shopify/koa-shopify-auth": "^3.2.0",
     "@shopify/koa-shopify-graphql-proxy": "^4.1.0",
-    "@shopify/koa-shopify-webhooks": "^2.6.0",
+    "@shopify/koa-shopify-webhooks": "^2.6.3",
     "@shopify/polaris": "^5.15.0",
     "@zeit/next-css": "^1.0.1",
     "apollo-boost": "^0.4.9",