diff --git a/package.json b/package.json
index 508edba..9437986 100644
--- a/package.json
+++ b/package.json
@@ -26,7 +26,7 @@
     "express-graphql": "^0.8.0",
     "graphql": "^14.3.1",
     "humps": "^2.0.1",
-    "lodash": "^4.17.13",
+    "lodash": "^4.17.21",
     "mongodb": "^2.1.18",
     "pg": "^6.0.1"
   },
diff --git a/yarn.lock b/yarn.lock
index f7cdb42..a58f75f 100644
--- a/yarn.lock
+++ b/yarn.lock
@@ -1686,10 +1686,10 @@ locate-path@^3.0.0:
     p-locate "^3.0.0"
     path-exists "^3.0.0"
 
-lodash@^4.17.11, lodash@^4.17.13:
-  version "4.17.13"
-  resolved "https://registry.yarnpkg.com/lodash/-/lodash-4.17.13.tgz#0bdc3a6adc873d2f4e0c4bac285df91b64fc7b93"
-  integrity sha512-vm3/XWXfWtRua0FkUyEHBZy8kCPjErNBT9fJx8Zvs+U6zjqPbTUOpkaoum3O5uiA8sm+yNMHXfYkTUHFoMxFNA==
+lodash@^4.17.11, lodash@^4.17.21:
+  version "4.17.21"
+  resolved "https://registry.yarnpkg.com/lodash/-/lodash-4.17.21.tgz#679591c564c3bffaae8454cf0b3df370c3d6911c"
+  integrity sha512-v2kDEe57lecTulaDIuNTPy3Ry4gLGJ6Z1O3vE1krgXZNrsQ+LFTGHVxVjcXPs17LhbZVGedAJv8XZ1tvj5FvSg==
 
 log-symbols@2.2.0:
   version "2.2.0"