diff --git a/samples/react-events-aggregator/package-lock.json b/samples/react-events-aggregator/package-lock.json
index 02770a68f..4889f85a0 100644
--- a/samples/react-events-aggregator/package-lock.json
+++ b/samples/react-events-aggregator/package-lock.json
@@ -5202,6 +5202,14 @@
       "dev": true,
       "requires": {
         "merge": "^1.1.3"
+      },
+      "dependencies": {
+        "merge": {
+          "version": "1.2.1",
+          "resolved": "https://registry.npmjs.org/merge/-/merge-1.2.1.tgz",
+          "integrity": "sha512-VjFo4P5Whtj4vsLzsYBu5ayHhoHJ0UqNm7ibvShmbmoz7tGi0vXaoJbGdB+GmDMLUdg8DpQXEIeVDAe8MaABvQ==",
+          "dev": true
+        }
       }
     },
     "execa": {
@@ -11668,9 +11676,9 @@
       }
     },
     "merge": {
-      "version": "1.2.1",
-      "resolved": "https://registry.npmjs.org/merge/-/merge-1.2.1.tgz",
-      "integrity": "sha512-VjFo4P5Whtj4vsLzsYBu5ayHhoHJ0UqNm7ibvShmbmoz7tGi0vXaoJbGdB+GmDMLUdg8DpQXEIeVDAe8MaABvQ=="
+      "version": "2.1.1",
+      "resolved": "https://registry.npmjs.org/merge/-/merge-2.1.1.tgz",
+      "integrity": "sha512-jz+Cfrg9GWOZbQAnDQ4hlVnQky+341Yk5ru8bZSe6sIDTCIg8n9i/u7hSQGSVOF3C7lH6mGtqjkiT9G4wFLL0w=="
     },
     "merge-descriptors": {
       "version": "1.0.1",
diff --git a/samples/react-events-aggregator/package.json b/samples/react-events-aggregator/package.json
index 126029925..fa521b04e 100644
--- a/samples/react-events-aggregator/package.json
+++ b/samples/react-events-aggregator/package.json
@@ -38,7 +38,7 @@
     "fresh": ">=0.5.2",
     "handlebars": ">=4.7.7",
     "lodash": ">=4.17.19",
-    "merge": ">=1.2.1",
+    "merge": ">=2.1.1",
     "morgan": ">=1.9.1",
     "stringstream": ">=0.0.6",
     "lodash.template": ">=4.5.0"