diff --git a/app/package-lock.json b/app/package-lock.json
index 89339f9..6ba6c00 100644
--- a/app/package-lock.json
+++ b/app/package-lock.json
@@ -8637,9 +8637,9 @@
       }
     },
     "lodash": {
-      "version": "4.17.20",
-      "resolved": "https://registry.npmjs.org/lodash/-/lodash-4.17.20.tgz",
-      "integrity": "sha512-PlhdFcillOINfeV7Ni6oF1TAEayyZBoZ8bcshTHqOYJYlrqzRK5hagpagky5o4HfCzzd1TRkXPMFq6cKk9rGmA=="
+      "version": "4.17.21",
+      "resolved": "https://registry.npmjs.org/lodash/-/lodash-4.17.21.tgz",
+      "integrity": "sha512-v2kDEe57lecTulaDIuNTPy3Ry4gLGJ6Z1O3vE1krgXZNrsQ+LFTGHVxVjcXPs17LhbZVGedAJv8XZ1tvj5FvSg=="
     },
     "lodash-ny-util": {
       "version": "0.1.1",
diff --git a/app/package.json b/app/package.json
index 87d2821..e633ef9 100644
--- a/app/package.json
+++ b/app/package.json
@@ -47,7 +47,7 @@
     "html-word-count": "^2.0.0",
     "isomorphic-fetch": "^2.2.1",
     "jsonp-client": "^1.1.1",
-    "lodash": "^4.17.13",
+    "lodash": "^4.17.21",
     "moment": "^2.24.0",
     "postcss-csso": "^3.0.0",
     "postcss-safe-parser": "^4.0.1",