diff --git a/package-lock.json b/package-lock.json
index 79d9269..d2e6e47 100644
--- a/package-lock.json
+++ b/package-lock.json
@@ -1209,9 +1209,9 @@
             }
         },
         "lodash": {
-            "version": "4.17.19",
-            "resolved": "https://registry.npmjs.org/lodash/-/lodash-4.17.19.tgz",
-            "integrity": "sha512-JNvd8XER9GQX0v2qJgsaN/mzFCNA5BRe/j8JN9d+tWyGLSodKQHKFicdwNYzWwI3wjRnaKPsGj1XkBjx/F96DQ=="
+            "version": "4.17.21",
+            "resolved": "https://registry.npmjs.org/lodash/-/lodash-4.17.21.tgz",
+            "integrity": "sha512-v2kDEe57lecTulaDIuNTPy3Ry4gLGJ6Z1O3vE1krgXZNrsQ+LFTGHVxVjcXPs17LhbZVGedAJv8XZ1tvj5FvSg=="
         },
         "map-stream": {
             "version": "0.1.0",
diff --git a/package.json b/package.json
index cfe082a..5f2cc58 100644
--- a/package.json
+++ b/package.json
@@ -379,7 +379,7 @@
         "@types/shelljs": "^0.8.0",
         "@types/tmp": "0.0.33",
         "cnabjs": "0.0.3",
-        "lodash": "^4.17.19",
+        "lodash": "^4.17.21",
         "request": "^2.88.0",
         "request-promise-native": "^1.0.5",
         "shelljs": "^0.7.7",