diff --git a/backend/package.json b/backend/package.json
index 4f77856..3ed12a3 100644
--- a/backend/package.json
+++ b/backend/package.json
@@ -3,7 +3,7 @@
     "cors": "^2.8.5",
     "esm": "^3.2.25",
     "express": "^4.17.1",
-    "lodash": "^4.17.15",
+    "lodash": "^4.17.21",
     "mocha": "^7.0.0",
     "mongodb": "^3.4.1",
     "mongoose": "^5.8.2",
diff --git a/backend/yarn.lock b/backend/yarn.lock
index d35c3f7..3aa73f5 100644
--- a/backend/yarn.lock
+++ b/backend/yarn.lock
@@ -1118,9 +1118,9 @@ lodash@4.17.14:
   version "4.17.14"
   resolved "https://registry.yarnpkg.com/lodash/-/lodash-4.17.14.tgz#9ce487ae66c96254fe20b599f21b6816028078ba"
 
-lodash@^4.17.10, lodash@^4.17.14, lodash@^4.17.15:
-  version "4.17.15"
-  resolved "https://registry.yarnpkg.com/lodash/-/lodash-4.17.15.tgz#b447f6670a0455bbfeedd11392eff330ea097548"
+lodash@^4.17.10, lodash@^4.17.14, lodash@^4.17.15, lodash@^4.17.21:
+  version "4.17.21"
+  resolved "https://registry.yarnpkg.com/lodash/-/lodash-4.17.21.tgz#679591c564c3bffaae8454cf0b3df370c3d6911c"
 
 log-driver@^1.2.7:
   version "1.2.7"