diff --git a/packages/angular/cli/package.json b/packages/angular/cli/package.json
index 270854b20f..b25ad80ba9 100644
--- a/packages/angular/cli/package.json
+++ b/packages/angular/cli/package.json
@@ -37,7 +37,7 @@
     "inquirer": "6.5.1",
     "npm-package-arg": "6.1.0",
     "open": "6.4.0",
-    "pacote": "9.5.4",
+    "pacote": "9.5.5",
     "read-package-tree": "5.3.1",
     "semver": "6.3.0",
     "symbol-observable": "1.2.0",
diff --git a/packages/schematics/update/package.json b/packages/schematics/update/package.json
index 3773967b25..477d312cd0 100644
--- a/packages/schematics/update/package.json
+++ b/packages/schematics/update/package.json
@@ -15,7 +15,7 @@
     "@angular-devkit/schematics": "0.0.0",
     "@yarnpkg/lockfile": "1.1.0",
     "ini": "1.3.5",
-    "pacote": "9.5.4",
+    "pacote": "9.5.5",
     "semver": "6.3.0",
     "semver-intersect": "1.4.0",
     "rxjs": "6.4.0"
diff --git a/yarn.lock b/yarn.lock
index 2ee493793b..dcd8b2368b 100644
--- a/yarn.lock
+++ b/yarn.lock
@@ -5730,7 +5730,7 @@ indexof@0.0.1:
   resolved "https://registry.yarnpkg.com/indexof/-/indexof-0.0.1.tgz#82dc336d232b9062179d05ab3293a66059fd435d"
   integrity sha1-gtwzbSMrkGIXnQWrMpOmYFn9Q10=
 
-infer-owner@^1.0.3:
+infer-owner@^1.0.3, infer-owner@^1.0.4:
   version "1.0.4"
   resolved "https://registry.yarnpkg.com/infer-owner/-/infer-owner-1.0.4.tgz#c4cefcaa8e51051c2a40ba2ce8a3d27295af9467"
   integrity sha512-IClj+Xz94+d7irH5qRyfJonOdfTzuDaifE6ZPWfx0N0+/ATZCbuTPq2prFl526urkQd90WyUKIh1DfBQ2hMz9A==
@@ -8347,16 +8347,17 @@ package-json@^6.3.0:
     registry-url "^5.0.0"
     semver "^6.2.0"
 
-pacote@9.5.4:
-  version "9.5.4"
-  resolved "https://registry.yarnpkg.com/pacote/-/pacote-9.5.4.tgz#8baa26f3d1326d13dc2fe0fe84040a364ae30aad"
-  integrity sha512-nWr0ari6E+apbdoN0hToTKZElO5h4y8DGFa2pyNA5GQIdcP0imC96bA0bbPw1gpeguVIiUgHHaAlq/6xfPp8Qw==
+pacote@9.5.5:
+  version "9.5.5"
+  resolved "https://registry.yarnpkg.com/pacote/-/pacote-9.5.5.tgz#63355a393614c3424e735820c3731e2cbbedaeeb"
+  integrity sha512-jAEP+Nqj4kyMWyNpfTU/Whx1jA7jEc5cCOlurm0/0oL+v8TAp1QSsK83N7bYe+2bEdFzMAtPG5TBebjzzGV0cA==
   dependencies:
     bluebird "^3.5.3"
-    cacache "^12.0.0"
+    cacache "^12.0.2"
     figgy-pudding "^3.5.1"
     get-stream "^4.1.0"
     glob "^7.1.3"
+    infer-owner "^1.0.4"
     lru-cache "^5.1.1"
     make-fetch-happen "^5.0.0"
     minimatch "^3.0.4"