diff --git a/packages/@aws-cdk/assets/package.json b/packages/@aws-cdk/assets/package.json
index 47b7c32dc46ef..de3fc60698db8 100644
--- a/packages/@aws-cdk/assets/package.json
+++ b/packages/@aws-cdk/assets/package.json
@@ -72,7 +72,7 @@
     "cdk-integ-tools": "1.20.0",
     "nodeunit": "^0.11.3",
     "pkglint": "1.20.0",
-    "sinon": "^8.0.2",
+    "sinon": "^8.0.4",
     "ts-mock-imports": "^1.2.6"
   },
   "dependencies": {
diff --git a/packages/@aws-cdk/aws-lambda/package.json b/packages/@aws-cdk/aws-lambda/package.json
index 19250857861cf..e6de01e7619db 100644
--- a/packages/@aws-cdk/aws-lambda/package.json
+++ b/packages/@aws-cdk/aws-lambda/package.json
@@ -80,7 +80,7 @@
     "nock": "^11.7.2",
     "nodeunit": "^0.11.3",
     "pkglint": "1.20.0",
-    "sinon": "^8.0.2"
+    "sinon": "^8.0.4"
   },
   "dependencies": {
     "@aws-cdk/aws-cloudwatch": "1.20.0",
diff --git a/packages/@aws-cdk/aws-s3-assets/package.json b/packages/@aws-cdk/aws-s3-assets/package.json
index 5a939983c0937..6c0a13102a9ac 100644
--- a/packages/@aws-cdk/aws-s3-assets/package.json
+++ b/packages/@aws-cdk/aws-s3-assets/package.json
@@ -67,7 +67,7 @@
     "cdk-integ-tools": "1.20.0",
     "nodeunit": "^0.11.3",
     "pkglint": "1.20.0",
-    "sinon": "^8.0.2",
+    "sinon": "^8.0.4",
     "ts-mock-imports": "^1.2.6"
   },
   "dependencies": {
diff --git a/packages/@aws-cdk/custom-resources/package.json b/packages/@aws-cdk/custom-resources/package.json
index 8de13d10a4105..5ce9a8922ac1f 100644
--- a/packages/@aws-cdk/custom-resources/package.json
+++ b/packages/@aws-cdk/custom-resources/package.json
@@ -81,7 +81,7 @@
     "fs-extra": "^8.1.0",
     "nock": "^11.7.2",
     "pkglint": "1.20.0",
-    "sinon": "^8.0.2"
+    "sinon": "^8.0.4"
   },
   "dependencies": {
     "@aws-cdk/aws-cloudformation": "1.20.0",
diff --git a/packages/aws-cdk/package.json b/packages/aws-cdk/package.json
index 60499cc09f602..627afc425f600 100644
--- a/packages/aws-cdk/package.json
+++ b/packages/aws-cdk/package.json
@@ -61,7 +61,7 @@
     "jszip": "^3.2.2",
     "mockery": "^2.1.0",
     "pkglint": "1.20.0",
-    "sinon": "^8.0.2",
+    "sinon": "^8.0.4",
     "ts-jest": "^24.2.0"
   },
   "dependencies": {
diff --git a/yarn.lock b/yarn.lock
index d04ec9b4614e2..ef4eaf723e3a9 100644
--- a/yarn.lock
+++ b/yarn.lock
@@ -7730,10 +7730,10 @@ signal-exit@^3.0.0, signal-exit@^3.0.2:
   resolved "https://registry.yarnpkg.com/signal-exit/-/signal-exit-3.0.2.tgz#b5fdc08f1287ea1178628e415e25132b73646c6d"
   integrity sha1-tf3AjxKH6hF4Yo5BXiUTK3NkbG0=
 
-sinon@^8.0.1, sinon@^8.0.2:
-  version "8.0.2"
-  resolved "https://registry.yarnpkg.com/sinon/-/sinon-8.0.2.tgz#cc5f6daa9cc351b86b03faaca1e9c3650a04ae11"
-  integrity sha512-8W1S7BnCyvk7SK+Xi15B1QAVLuS81G/NGmWefPb31+ly6xI3fXaug/g5oUdfc8+7ruC4Ay51AxuLlYm8diq6kA==
+sinon@^8.0.1, sinon@^8.0.4:
+  version "8.0.4"
+  resolved "https://registry.yarnpkg.com/sinon/-/sinon-8.0.4.tgz#eb13242fa50bf876c54e88bdc96f281a0dd08a53"
+  integrity sha512-cFsmgmvsgFb87e7SV7IcekogITlHX2KmlplyI9Pda0FH1Z8Ms/kWbpLs25Idp0m6ZJ3HEEjhaYYXbcTtWWUn4w==
   dependencies:
     "@sinonjs/commons" "^1.7.0"
     "@sinonjs/formatio" "^4.0.1"