diff --git a/tools/package.json b/tools/package.json
index d74a0111546d37..8d24ac5ae71cc9 100644
--- a/tools/package.json
+++ b/tools/package.json
@@ -46,7 +46,7 @@
     "jsondiffpatch": "^0.4.1",
     "junit-report-builder": "^1.3.0",
     "lan-network": "^0.1.7",
-    "lodash": "^4.17.21",
+    "lodash": "^4.17.23",
     "marked": "^1.1.0",
     "minimatch": "^3.0.4",
     "npm-packlist": "^5.1.3",
diff --git a/tools/yarn.lock b/tools/yarn.lock
index ebbfba8b2ad67d..e14938e9d748cf 100644
--- a/tools/yarn.lock
+++ b/tools/yarn.lock
@@ -4228,10 +4228,10 @@ lodash.merge@^4.6.2:
   resolved "https://registry.yarnpkg.com/lodash.merge/-/lodash.merge-4.6.2.tgz#558aa53b43b661e1925a0afdfa36a9a1085fe57a"
   integrity sha512-0KpjqXRVvrYyCsX1swR/XTK0va6VQkQM6MNo7PqW77ByjAhoARA8EfrP1N4+KlKj8YS0ZUCtRT/YUuhyYDujIQ==
 
-lodash@^4.17.10, lodash@^4.17.21:
-  version "4.17.21"
-  resolved "https://registry.yarnpkg.com/lodash/-/lodash-4.17.21.tgz#679591c564c3bffaae8454cf0b3df370c3d6911c"
-  integrity sha512-v2kDEe57lecTulaDIuNTPy3Ry4gLGJ6Z1O3vE1krgXZNrsQ+LFTGHVxVjcXPs17LhbZVGedAJv8XZ1tvj5FvSg==
+lodash@^4.17.10, lodash@^4.17.21, lodash@^4.17.23:
+  version "4.17.23"
+  resolved "https://registry.yarnpkg.com/lodash/-/lodash-4.17.23.tgz#f113b0378386103be4f6893388c73d0bde7f2c5a"
+  integrity sha512-LgVTMpQtIopCi79SJeDiP0TfWi5CNEc/L/aRdTh3yIvmZXTnheWpKjSZhnvMl8iXbC1tFg9gdHHDMLoV7CnG+w==
 
 log-symbols@^4.1.0:
   version "4.1.0"