diff --git a/package-lock.json b/package-lock.json
index 7652b5498..9e9512cc0 100644
--- a/package-lock.json
+++ b/package-lock.json
@@ -11102,9 +11102,9 @@
             }
         },
         "lodash": {
-            "version": "3.9.3",
-            "resolved": "https://registry.npmjs.org/lodash/-/lodash-3.9.3.tgz",
-            "integrity": "sha1-AVnoaDL+/8bWHYUrEqlTuZSWvTI="
+            "version": "4.17.21",
+            "resolved": "https://registry.npmjs.org/lodash/-/lodash-4.17.21.tgz",
+            "integrity": "sha512-v2kDEe57lecTulaDIuNTPy3Ry4gLGJ6Z1O3vE1krgXZNrsQ+LFTGHVxVjcXPs17LhbZVGedAJv8XZ1tvj5FvSg=="
         },
         "lodash._baseassign": {
             "version": "3.2.0",
diff --git a/package.json b/package.json
index 34c38a89c..4724d4c70 100644
--- a/package.json
+++ b/package.json
@@ -45,7 +45,7 @@
         "jsonfile": "2.3.1",
         "keypair": "1.0.0",
         "locale": "0.1.0",
-        "lodash": "3.9.3",
+        "lodash": "4.17.21",
         "markdown": "^0.5.0",
         "md5": "2.1.0",
         "mkdirp": "0.5.1",