diff --git a/package.json b/package.json
index 6476367..befbc16 100644
--- a/package.json
+++ b/package.json
@@ -36,7 +36,7 @@
     "express": "^4.15.0",
     "express-http-proxy": "^0.11.0",
     "js-yaml": "^3.8.2",
-    "lodash": "^4.17.4",
+    "lodash": "^4.17.16",
     "npm-cli-login": "^0.0.10",
     "replicated-lint": "^0.18.5",
     "source-map-support": "^0.4.11",
diff --git a/yarn.lock b/yarn.lock
index 7ebec69..c010c5d 100644
--- a/yarn.lock
+++ b/yarn.lock
@@ -1833,10 +1833,15 @@ lodash@^4, lodash@^4.11.1, lodash@^4.17.10, lodash@^4.17.5, lodash@^4.3.0:
   resolved "https://registry.yarnpkg.com/lodash/-/lodash-4.17.11.tgz#b39ea6229ef607ecd89e2c8df12536891cac9b8d"
   integrity sha512-cQKh8igo5QUhZ7lg38DYWAxMvjSAKG0A8wGSVimP07SIUEK2UO+arSRKbRZWtelMtN5V0Hkwh5ryOto/SshYIg==
 
-lodash@^4.14.0, lodash@^4.17.4:
+lodash@^4.14.0:
   version "4.17.4"
   resolved "https://registry.yarnpkg.com/lodash/-/lodash-4.17.4.tgz#78203a4d1c328ae1d86dca6460e369b57f4055ae"
 
+lodash@^4.17.16:
+  version "4.17.19"
+  resolved "https://registry.yarnpkg.com/lodash/-/lodash-4.17.19.tgz#e48ddedbe30b3321783c5b4301fbd353bc1e4a4b"
+  integrity sha512-JNvd8XER9GQX0v2qJgsaN/mzFCNA5BRe/j8JN9d+tWyGLSodKQHKFicdwNYzWwI3wjRnaKPsGj1XkBjx/F96DQ==
+
 lowercase-keys@^1.0.0:
   version "1.0.0"
   resolved "https://registry.yarnpkg.com/lowercase-keys/-/lowercase-keys-1.0.0.tgz#4e3366b39e7f5457e35f1324bdf6f88d0bfc7306"