diff --git a/backend/api/package-lock.json b/backend/api/package-lock.json
index 95f7a82..682f82a 100644
--- a/backend/api/package-lock.json
+++ b/backend/api/package-lock.json
@@ -1921,9 +1921,9 @@
       }
     },
     "lodash": {
-      "version": "4.17.13",
-      "resolved": "https://registry.npmjs.org/lodash/-/lodash-4.17.13.tgz",
-      "integrity": "sha512-vm3/XWXfWtRua0FkUyEHBZy8kCPjErNBT9fJx8Zvs+U6zjqPbTUOpkaoum3O5uiA8sm+yNMHXfYkTUHFoMxFNA=="
+      "version": "4.17.21",
+      "resolved": "https://registry.npmjs.org/lodash/-/lodash-4.17.21.tgz",
+      "integrity": "sha512-v2kDEe57lecTulaDIuNTPy3Ry4gLGJ6Z1O3vE1krgXZNrsQ+LFTGHVxVjcXPs17LhbZVGedAJv8XZ1tvj5FvSg=="
     },
     "lodash.debounce": {
       "version": "4.0.8",
diff --git a/backend/api/package.json b/backend/api/package.json
index 620796e..079f0e1 100644
--- a/backend/api/package.json
+++ b/backend/api/package.json
@@ -29,7 +29,7 @@
   "dependencies": {
     "body-parser": "^1.18.3",
     "express": "^4.16.3",
-    "lodash": "^4.17.13",
+    "lodash": "^4.17.21",
     "massive": "^5.0.0",
     "moment": "^2.22.2",
     "morgan": "^1.9.1"