diff --git a/reference/package.json b/reference/package.json
index 246a7456..1da76873 100644
--- a/reference/package.json
+++ b/reference/package.json
@@ -93,7 +93,7 @@
     "codemirror": "^5.34.0",
     "core-js": "^2.5.3",
     "js-beautify": "^1.7.5",
-    "lodash": "^4.17.4",
+    "lodash": "^4.17.21",
     "preact": "^8.1.0",
     "preact-compat": "^3.15.0",
     "preact-render-to-string": "^3.6.0",
diff --git a/reference/yarn.lock b/reference/yarn.lock
index dfd3e4f3..b4e82e9b 100644
--- a/reference/yarn.lock
+++ b/reference/yarn.lock
@@ -4584,9 +4584,9 @@ lodash.uniq@^4.5.0:
   version "4.5.0"
   resolved "https://registry.npmjs.org/lodash.uniq/-/lodash.uniq-4.5.0.tgz#d0225373aeb652adc1bc82e4945339a842754773"
 
-lodash@^4.13.1, lodash@^4.14.0, lodash@^4.17.2, lodash@^4.17.3, lodash@^4.17.4, lodash@^4.2.0, lodash@^4.3.0:
-  version "4.17.5"
-  resolved "https://registry.npmjs.org/lodash/-/lodash-4.17.5.tgz#99a92d65c0272debe8c96b6057bc8fbfa3bed511"
+lodash@^4.13.1, lodash@^4.14.0, lodash@^4.17.2, lodash@^4.17.21, lodash@^4.17.3, lodash@^4.17.4, lodash@^4.2.0, lodash@^4.3.0:
+  version "4.17.21"
+  resolved "https://registry.yarnpkg.com/lodash/-/lodash-4.17.21.tgz#679591c564c3bffaae8454cf0b3df370c3d6911c"
 
 loglevel@^1.4.1:
   version "1.6.1"