diff --git a/api/package.json b/api/package.json
index 22b3b6f..90192c8 100644
--- a/api/package.json
+++ b/api/package.json
@@ -17,7 +17,7 @@
     "html-to-text": "^4.0.0",
     "htmlparser2": "^3.9.2",
     "jsonschema": "^1.2.2",
-    "lodash": "^4.17.19",
+    "lodash": "^4.17.21",
     "mongodb": "^2.2.33",
     "ms": "^2.1.1",
     "node-fetch": "^2.1.2",
diff --git a/api/yarn.lock b/api/yarn.lock
index fb78b8b..96c23e2 100644
--- a/api/yarn.lock
+++ b/api/yarn.lock
@@ -1166,9 +1166,9 @@ lodash.reduce@4.6.0:
   version "4.6.0"
   resolved "https://registry.yarnpkg.com/lodash.reduce/-/lodash.reduce-4.6.0.tgz#f1ab6b839299ad48f784abbf476596f03b914d3b"
 
-lodash@^4.17.19, lodash@^4.17.4:
-  version "4.17.19"
-  resolved "https://registry.yarnpkg.com/lodash/-/lodash-4.17.19.tgz#e48ddedbe30b3321783c5b4301fbd353bc1e4a4b"
+lodash@^4.17.21, lodash@^4.17.4:
+  version "4.17.21"
+  resolved "https://registry.yarnpkg.com/lodash/-/lodash-4.17.21.tgz#679591c564c3bffaae8454cf0b3df370c3d6911c"
 
 long-timeout@0.1.1:
   version "0.1.1"