diff --git a/cla-backend-go/package.json b/cla-backend-go/package.json
index 3cf26200c..137ac4475 100644
--- a/cla-backend-go/package.json
+++ b/cla-backend-go/package.json
@@ -43,6 +43,7 @@
     "minimist": "^1.2.6",
     "normalize-url": "^4.5.1",
     "qs": "^6.11.0",
+    "semver": "^7.5.4",
     "set-value": "^4.0.1",
     "simple-git": "^3.16.0",
     "ws": "^7.4.6",
diff --git a/cla-backend-go/yarn.lock b/cla-backend-go/yarn.lock
index c752eeb4a..5a755d08e 100644
--- a/cla-backend-go/yarn.lock
+++ b/cla-backend-go/yarn.lock
@@ -2313,17 +2313,10 @@ seek-bzip@^1.0.5:
   dependencies:
     commander "^2.8.1"
 
-semver@^5.5.0:
-  version "5.7.1"
-  resolved "https://registry.npmjs.org/semver/-/semver-5.7.1.tgz"
-
-semver@^6.0.0:
-  version "6.3.0"
-  resolved "https://registry.npmjs.org/semver/-/semver-6.3.0.tgz"
-
-semver@^7.3.2, semver@^7.3.5, semver@^7.3.8, semver@^7.5.1:
-  version "7.5.1"
-  resolved "https://registry.yarnpkg.com/semver/-/semver-7.5.1.tgz#c90c4d631cf74720e46b21c1d37ea07edfab91ec"
+semver@^5.5.0, semver@^6.0.0, semver@^7.3.2, semver@^7.3.5, semver@^7.3.8, semver@^7.5.1, semver@^7.5.4:
+  version "7.5.4"
+  resolved "https://registry.yarnpkg.com/semver/-/semver-7.5.4.tgz#483986ec4ed38e1c6c48c34894a9182dbff68a6e"
+  integrity sha512-1bCSESV6Pv+i21Hvpxp3Dx+pSD8lIPt8uVjRrxAUt/nbswYc+tK6Y2btiULjd4+fnq15PX+nqQDC7Oft7WkwcA==
   dependencies:
     lru-cache "^6.0.0"