diff --git a/package-lock.json b/package-lock.json
index 7631cd2b..cf709c99 100644
--- a/package-lock.json
+++ b/package-lock.json
@@ -51,7 +51,7 @@
         "graphql-tag": "^2.12.6",
         "gunzip-maybe": "^1.4.2",
         "iconv-lite": "^0.4.24",
-        "lodash": "^4.17.23",
+        "lodash": "^4.18.1",
         "lookpath": "^1.2.1",
         "mime-types": "^2.1.27",
         "mobx": "^6.3.5",
@@ -9793,9 +9793,9 @@
       }
     },
     "node_modules/lodash": {
-      "version": "4.17.23",
-      "resolved": "https://registry.npmjs.org/lodash/-/lodash-4.17.23.tgz",
-      "integrity": "sha512-LgVTMpQtIopCi79SJeDiP0TfWi5CNEc/L/aRdTh3yIvmZXTnheWpKjSZhnvMl8iXbC1tFg9gdHHDMLoV7CnG+w==",
+      "version": "4.18.1",
+      "resolved": "https://registry.npmjs.org/lodash/-/lodash-4.18.1.tgz",
+      "integrity": "sha512-dMInicTPVE8d1e5otfwmmjlxkZoUpiVLwyeTdUsi/Caj/gfzzblBcCE5sRHV/AsjuCmxWrte2TNGSYuCeCq+0Q==",
       "license": "MIT"
     },
     "node_modules/lodash._baseiteratee": {
diff --git a/package.json b/package.json
index cd39df11..c4980ed5 100644
--- a/package.json
+++ b/package.json
@@ -80,7 +80,7 @@
     "graphql-tag": "^2.12.6",
     "gunzip-maybe": "^1.4.2",
     "iconv-lite": "^0.4.24",
-    "lodash": "^4.17.23",
+    "lodash": "^4.18.1",
     "lookpath": "^1.2.1",
     "mime-types": "^2.1.27",
     "mobx": "^6.3.5",