diff --git a/CHANGELOG.md b/CHANGELOG.md
index 21b80f95..da0042c7 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -26,6 +26,7 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
   dependencies when setting up CLI arguments (#690).
 - agent: Import of ClusterShell NodeSet class (#682). Contribution from
   @faganihajizada.
+- front: Update dependencies to fix CVE-2025-13465 (lodash).
 - docs: Fix user/group name in agent uWSGI service diff context.
 
 ### Removed
diff --git a/frontend/package-lock.json b/frontend/package-lock.json
index 3a358175..73ffa401 100644
--- a/frontend/package-lock.json
+++ b/frontend/package-lock.json
@@ -4392,9 +4392,9 @@
       }
     },
     "node_modules/lodash": {
-      "version": "4.17.21",
-      "resolved": "https://registry.npmjs.org/lodash/-/lodash-4.17.21.tgz",
-      "integrity": "sha512-v2kDEe57lecTulaDIuNTPy3Ry4gLGJ6Z1O3vE1krgXZNrsQ+LFTGHVxVjcXPs17LhbZVGedAJv8XZ1tvj5FvSg==",
+      "version": "4.17.23",
+      "resolved": "https://registry.npmjs.org/lodash/-/lodash-4.17.23.tgz",
+      "integrity": "sha512-LgVTMpQtIopCi79SJeDiP0TfWi5CNEc/L/aRdTh3yIvmZXTnheWpKjSZhnvMl8iXbC1tFg9gdHHDMLoV7CnG+w==",
       "dev": true,
       "license": "MIT"
     },