diff --git a/tools/sandbox/grpc_web/package-lock.json b/tools/sandbox/grpc_web/package-lock.json
index 102fe2bea6..d36cbeb7b3 100644
--- a/tools/sandbox/grpc_web/package-lock.json
+++ b/tools/sandbox/grpc_web/package-lock.json
@@ -2039,9 +2039,9 @@
       "dev": true
     },
     "grpc-web": {
-      "version": "1.0.3",
-      "resolved": "https://registry.npmjs.org/grpc-web/-/grpc-web-1.0.3.tgz",
-      "integrity": "sha512-C1mk+55YgPAmU4OK36Fm+nZoo62KTmjSF4/aUHT/yfpKFKTR6r/O8aavyRWaXUT83EcsoZoQaWYWY/2hrOSRJg=="
+      "version": "1.0.7",
+      "resolved": "https://registry.npmjs.org/grpc-web/-/grpc-web-1.0.7.tgz",
+      "integrity": "sha512-Fkbz1nyvvt6GC6ODcxh9Fen6LLB3OTCgGHzHwM2Eni44SUhzqPz1UQgFp9sfBEfInOhx3yBdwo9ZLjZAmJ+TtA=="
     },
     "grpc-web-client": {
       "version": "0.7.0",
diff --git a/tools/sandbox/grpc_web/package.json b/tools/sandbox/grpc_web/package.json
index 1d4ce3714c..5951f5a6fb 100644
--- a/tools/sandbox/grpc_web/package.json
+++ b/tools/sandbox/grpc_web/package.json
@@ -2,7 +2,7 @@
   "name": "echo-client",
   "dependencies": {
     "google-protobuf": "^3.6.1",
-    "grpc-web": "^1.0.3",
+    "grpc-web": "^1.0.7",
     "grpc-web-client": "^0.7.0"
   },
   "devDependencies": {