diff --git a/package-lock.json b/package-lock.json
index 1b9b835..92e7cd3 100644
--- a/package-lock.json
+++ b/package-lock.json
@@ -9699,9 +9699,9 @@
       }
     },
     "lodash": {
-      "version": "4.17.19",
-      "resolved": "https://registry.npmjs.org/lodash/-/lodash-4.17.19.tgz",
-      "integrity": "sha512-JNvd8XER9GQX0v2qJgsaN/mzFCNA5BRe/j8JN9d+tWyGLSodKQHKFicdwNYzWwI3wjRnaKPsGj1XkBjx/F96DQ==",
+      "version": "4.17.21",
+      "resolved": "https://registry.npmjs.org/lodash/-/lodash-4.17.21.tgz",
+      "integrity": "sha512-v2kDEe57lecTulaDIuNTPy3Ry4gLGJ6Z1O3vE1krgXZNrsQ+LFTGHVxVjcXPs17LhbZVGedAJv8XZ1tvj5FvSg==",
       "dev": true
     },
     "lodash.camelcase": {
diff --git a/package.json b/package.json
index dadd08e..58695f0 100644
--- a/package.json
+++ b/package.json
@@ -47,7 +47,7 @@
     "karma-coverage-istanbul-reporter": "~2.0.1",
     "karma-jasmine": "~2.0.1",
     "karma-jasmine-html-reporter": "^1.4.0",
-    "lodash": "^4.17.19",
+    "lodash": "^4.17.21",
     "postcss-loader": "^3.0.0",
     "postcss-modules": "^1.5.0",
     "posthtml-css-modules": "^0.1.3",