diff --git a/kotoed-js/package.json b/kotoed-js/package.json
index 8e4e3521..55240374 100644
--- a/kotoed-js/package.json
+++ b/kotoed-js/package.json
@@ -78,7 +78,7 @@
     "history": "~4.6.3",
     "immutable": "~3.8.2",
     "jquery": "~3.2.1",
-    "lodash": "~4.17.4",
+    "lodash": "~4.17.21",
     "moment": "~2.18.1",
     "mousetrap": "1.6.1",
     "natsort": "^2.0.2",
diff --git a/kotoed-js/yarn.lock b/kotoed-js/yarn.lock
index 0c66ad41..a025d155 100644
--- a/kotoed-js/yarn.lock
+++ b/kotoed-js/yarn.lock
@@ -2981,13 +2981,9 @@ lodash.uniq@^4.5.0:
   version "4.5.0"
   resolved "https://registry.npmjs.org/lodash.uniq/-/lodash.uniq-4.5.0.tgz"
 
-lodash@^4.1.1, lodash@^4.17.4, lodash@^4.2.0, lodash@^4.2.1, lodash@~4.17.4:
-  version "4.17.4"
-  resolved "https://registry.npmjs.org/lodash/-/lodash-4.17.4.tgz"
-
-lodash@^4.17.14:
-  version "4.17.15"
-  resolved "https://registry.npmjs.org/lodash/-/lodash-4.17.15.tgz"
+lodash@^4.1.1, lodash@^4.17.14, lodash@^4.17.4, lodash@^4.2.0, lodash@^4.2.1, lodash@~4.17.21:
+  version "4.17.21"
+  resolved "https://registry.yarnpkg.com/lodash/-/lodash-4.17.21.tgz#679591c564c3bffaae8454cf0b3df370c3d6911c"
 
 longest@^1.0.1:
   version "1.0.1"