diff --git a/package-lock.json b/package-lock.json
index 87f894d..8ddcb2f 100644
--- a/package-lock.json
+++ b/package-lock.json
@@ -9101,9 +9101,9 @@
       }
     },
     "lodash": {
-      "version": "4.17.1",
-      "resolved": "https://registry.npmjs.org/lodash/-/lodash-4.17.1.tgz",
-      "integrity": "sha1-516vF6NHMMZJHZlW9NgfOgRPAb8="
+      "version": "4.17.21",
+      "resolved": "https://registry.npmjs.org/lodash/-/lodash-4.17.21.tgz",
+      "integrity": "sha512-v2kDEe57lecTulaDIuNTPy3Ry4gLGJ6Z1O3vE1krgXZNrsQ+LFTGHVxVjcXPs17LhbZVGedAJv8XZ1tvj5FvSg=="
     },
     "lodash-es": {
       "version": "4.17.15",
diff --git a/package.json b/package.json
index c4a5d96..c3dbfd6 100644
--- a/package.json
+++ b/package.json
@@ -52,7 +52,7 @@
     "express": "4.14.0",
     "express-mysql-session": "1.2.0",
     "express-session": "1.14.2",
-    "lodash": "4.17.1",
+    "lodash": "4.17.21",
     "moment": "2.16.0",
     "mysql": "2.12.0",
     "nodemailer": "2.6.4",