diff --git a/package-lock.json b/package-lock.json
index e73aa28..e2795c9 100644
--- a/package-lock.json
+++ b/package-lock.json
@@ -3209,9 +3209,9 @@
       }
     },
     "lodash": {
-      "version": "4.17.11",
-      "resolved": "https://registry.npmjs.org/lodash/-/lodash-4.17.11.tgz",
-      "integrity": "sha512-cQKh8igo5QUhZ7lg38DYWAxMvjSAKG0A8wGSVimP07SIUEK2UO+arSRKbRZWtelMtN5V0Hkwh5ryOto/SshYIg=="
+      "version": "4.17.21",
+      "resolved": "https://registry.npmjs.org/lodash/-/lodash-4.17.21.tgz",
+      "integrity": "sha512-v2kDEe57lecTulaDIuNTPy3Ry4gLGJ6Z1O3vE1krgXZNrsQ+LFTGHVxVjcXPs17LhbZVGedAJv8XZ1tvj5FvSg=="
     },
     "long": {
       "version": "4.0.0",
diff --git a/package.json b/package.json
index b30fa35..230ee49 100644
--- a/package.json
+++ b/package.json
@@ -36,7 +36,7 @@
     "express-graphql": "^0.8.0",
     "graphql": "^14.3.1",
     "graphql-tools": "^4.0.4",
-    "lodash": "^4.17.11",
+    "lodash": "^4.17.21",
     "mysql2": "^1.6.5",
     "sequelize": "^5.8.7"
   }