diff --git a/package-lock.json b/package-lock.json
index d439ddf3..95077a59 100644
--- a/package-lock.json
+++ b/package-lock.json
@@ -2526,23 +2526,23 @@
       "dev": true
     },
     "css-loader": {
-      "version": "0.28.6",
-      "resolved": "https://registry.npmjs.org/css-loader/-/css-loader-0.28.6.tgz",
-      "integrity": "sha512-i3k2sLTweSFeLWosniuZSWCof3uAvg6IUqO1xN+2YSEEzpeQnT+rpobWpT6X+F39SdN8Qk74yLs94DHVpNp+IA==",
+      "version": "0.28.11",
+      "resolved": "https://registry.npmjs.org/css-loader/-/css-loader-0.28.11.tgz",
+      "integrity": "sha512-wovHgjAx8ZIMGSL8pTys7edA1ClmzxHeY6n/d97gg5odgsxEgKjULPR0viqyC+FWMCL9sfqoC/QCUBo62tLvPg==",
       "dev": true,
       "requires": {
-        "babel-code-frame": "^6.11.0",
+        "babel-code-frame": "^6.26.0",
         "css-selector-tokenizer": "^0.7.0",
-        "cssnano": ">=2.6.1 <4",
+        "cssnano": "^3.10.0",
         "icss-utils": "^2.1.0",
         "loader-utils": "^1.0.2",
         "lodash.camelcase": "^4.3.0",
-        "object-assign": "^4.0.1",
+        "object-assign": "^4.1.1",
         "postcss": "^5.0.6",
-        "postcss-modules-extract-imports": "^1.0.0",
-        "postcss-modules-local-by-default": "^1.0.1",
-        "postcss-modules-scope": "^1.0.0",
-        "postcss-modules-values": "^1.1.0",
+        "postcss-modules-extract-imports": "^1.2.0",
+        "postcss-modules-local-by-default": "^1.2.0",
+        "postcss-modules-scope": "^1.1.0",
+        "postcss-modules-values": "^1.3.0",
         "postcss-value-parser": "^3.3.0",
         "source-list-map": "^2.0.0"
       },
diff --git a/package.json b/package.json
index 9c6b8c49..75660f08 100644
--- a/package.json
+++ b/package.json
@@ -32,7 +32,7 @@
     "babel-preset-react": "6.24.1",
     "classnames": "2.2.5",
     "copy-webpack-plugin": "4.0.1",
-    "css-loader": "0.28.6",
+    "css-loader": "0.28.11",
     "eslint": "4.19.0",
     "eslint-config-scratch": "5.1.0",
     "eslint-plugin-json": "1.2.0",