diff --git a/tools/cldr-apps/js/package-lock.json b/tools/cldr-apps/js/package-lock.json
index b556397fa93..effb41a5d85 100644
--- a/tools/cldr-apps/js/package-lock.json
+++ b/tools/cldr-apps/js/package-lock.json
@@ -17,7 +17,7 @@
         "swagger-client": "^3.26.7",
         "vue": "^3.2.47",
         "vue-virtual-scroller": "^2.0.0-beta.8",
-        "xlsx": "https://cdn.sheetjs.com/xlsx-0.20.0/xlsx-0.20.0.tgz"
+        "xlsx": "https://cdn.sheetjs.com/xlsx-0.20.2/xlsx-0.20.2.tgz"
       },
       "devDependencies": {
         "chai": "^4.3.6",
@@ -4634,10 +4634,9 @@
       "devOptional": true
     },
     "node_modules/xlsx": {
-      "version": "0.20.0",
-      "resolved": "https://cdn.sheetjs.com/xlsx-0.20.0/xlsx-0.20.0.tgz",
-      "integrity": "sha512-adg5edVTkXXGTnb0iWrc3Z47ViGgwmD47yx6VfSCZhfdKPtHcElYGs48OtcO4nwOu90Pjz5mmyl0HLcvbSRYTQ==",
-      "license": "Apache-2.0",
+      "version": "0.20.2",
+      "resolved": "https://cdn.sheetjs.com/xlsx-0.20.2/xlsx-0.20.2.tgz",
+      "integrity": "sha512-+nKZ39+nvK7Qq6i0PvWWRA4j/EkfWOtkP/YhMtupm+lJIiHxUrgTr1CcKv1nBk1rHtkRRQ3O2+Ih/q/sA+FXZA==",
       "bin": {
         "xlsx": "bin/xlsx.njs"
       },
diff --git a/tools/cldr-apps/js/package.json b/tools/cldr-apps/js/package.json
index bddc1fd55fe..16aaa37e93a 100644
--- a/tools/cldr-apps/js/package.json
+++ b/tools/cldr-apps/js/package.json
@@ -49,6 +49,6 @@
     "swagger-client": "^3.26.7",
     "vue": "^3.2.47",
     "vue-virtual-scroller": "^2.0.0-beta.8",
-    "xlsx": "https://cdn.sheetjs.com/xlsx-0.20.0/xlsx-0.20.0.tgz"
+    "xlsx": "https://cdn.sheetjs.com/xlsx-0.20.2/xlsx-0.20.2.tgz"
   }
 }