diff --git a/internal/cli/command/form/web/package-lock.json b/internal/cli/command/form/web/package-lock.json
index 8a56ccb7..d022db76 100644
--- a/internal/cli/command/form/web/package-lock.json
+++ b/internal/cli/command/form/web/package-lock.json
@@ -3846,9 +3846,9 @@
       }
     },
     "core-js": {
-      "version": "2.5.4",
-      "resolved": "https://registry.npmjs.org/core-js/-/core-js-2.5.4.tgz",
-      "integrity": "sha1-8si/GB8qgLkvNgEhQpzmOi8K6uA="
+      "version": "2.6.11",
+      "resolved": "https://registry.npmjs.org/core-js/-/core-js-2.6.11.tgz",
+      "integrity": "sha512-5wjnpaT/3dV+XB4borEsnAYQchn00XSgTAWKDkEqv+K8KevjbzmofK6hfJ9TZIlpj2N0xQpazy7PiRQiWHqzWg=="
     },
     "core-js-compat": {
       "version": "3.6.4",
diff --git a/internal/cli/command/form/web/package.json b/internal/cli/command/form/web/package.json
index 823f8230..6c4d5496 100644
--- a/internal/cli/command/form/web/package.json
+++ b/internal/cli/command/form/web/package.json
@@ -24,7 +24,7 @@
     "@ctrl/ngx-codemirror": "1.3.10",
     "ajv": "6.10.2",
     "codemirror": "5.47.0",
-    "core-js": "2.5.4",
+    "core-js": "2.6.11",
     "lodash": "4.17.15",
     "lodash-es": "4.17.15",
     "rxjs": "6.5.4",