diff --git a/workspaces/arborist/test/fixtures/tap-with-yarn-lock/node_modules/sshpk/package.json b/workspaces/arborist/test/fixtures/tap-with-yarn-lock/node_modules/sshpk/package.json
index cc78787f8c2af..696364f79f64c 100644
--- a/workspaces/arborist/test/fixtures/tap-with-yarn-lock/node_modules/sshpk/package.json
+++ b/workspaces/arborist/test/fixtures/tap-with-yarn-lock/node_modules/sshpk/package.json
@@ -46,7 +46,7 @@
     "safer-buffer": "^2.0.2",
     "jsbn": "~0.1.0",
     "tweetnacl": "~0.14.0",
-    "ecc-jsbn": "~0.1.1",
+    "ecc-jsbn": "~0.2.0",
     "bcrypt-pbkdf": "^1.0.0"
   },
   "optionalDependencies": {