diff --git a/webui/CHANGELOG.md b/webui/CHANGELOG.md
index 6b040b4f0..6655e48ce 100644
--- a/webui/CHANGELOG.md
+++ b/webui/CHANGELOG.md
@@ -8,6 +8,7 @@ This change log covers only the frontend library (webui) of Open VSX.
 
 - Bump picomatch from `4.0.3` to `4.0.4` ([#1720](https://github.com/eclipse/openvsx/pull/1720))
 - Bump yaml from `1.20.2` to `1.20.3` ([#1717](https://github.com/eclipse/openvsx/pull/1717))
+- Bump lodash from `4.17.23` to `4.18.1` ([#1742](https://github.com/eclipse/openvsx/pull/1742))
 
 ## [v0.19.0] (Mar. 2026)
 
diff --git a/webui/yarn.lock b/webui/yarn.lock
index 2a5c88385..648a8813f 100644
--- a/webui/yarn.lock
+++ b/webui/yarn.lock
@@ -5291,9 +5291,9 @@ __metadata:
   linkType: hard
 
 "lodash@npm:^4.17.21":
-  version: 4.17.23
-  resolution: "lodash@npm:4.17.23"
-  checksum: 10/82504c88250f58da7a5a4289f57a4f759c44946c005dd232821c7688b5fcfbf4a6268f6a6cdde4b792c91edd2f3b5398c1d2a0998274432cff76def48735e233
+  version: 4.18.1
+  resolution: "lodash@npm:4.18.1"
+  checksum: 10/306fea53dfd39dad1f03d45ba654a2405aebd35797b673077f401edb7df2543623dc44b9effbb98f69b32152295fff725a4cec99c684098947430600c6af0c3f
   languageName: node
   linkType: hard