diff --git a/express-web/package-lock.json b/express-web/package-lock.json
index 5c81bbdc..db35497a 100644
--- a/express-web/package-lock.json
+++ b/express-web/package-lock.json
@@ -3190,9 +3190,9 @@
             }
         },
         "lodash": {
-            "version": "4.17.11",
-            "resolved": "https://registry.npmjs.org/lodash/-/lodash-4.17.11.tgz",
-            "integrity": "sha512-cQKh8igo5QUhZ7lg38DYWAxMvjSAKG0A8wGSVimP07SIUEK2UO+arSRKbRZWtelMtN5V0Hkwh5ryOto/SshYIg=="
+            "version": "4.17.21",
+            "resolved": "https://registry.npmjs.org/lodash/-/lodash-4.17.21.tgz",
+            "integrity": "sha512-v2kDEe57lecTulaDIuNTPy3Ry4gLGJ6Z1O3vE1krgXZNrsQ+LFTGHVxVjcXPs17LhbZVGedAJv8XZ1tvj5FvSg=="
         },
         "lodash.isfunction": {
             "version": "3.0.9",
diff --git a/express-web/package.json b/express-web/package.json
index 8f36d54f..07eed185 100644
--- a/express-web/package.json
+++ b/express-web/package.json
@@ -33,7 +33,7 @@
         "@babel/preset-env": "^7.4.3",
         "cross-env": "^5.2.0",
         "jsdoc": "^3.5.5",
-        "lodash": "^4.17.11",
+        "lodash": "^4.17.21",
         "mocha": "^6.1.3",
         "mochawesome": "^3.1.1",
         "should": "^13.2.3",