diff --git a/package.json b/package.json
index 2871916..29dba43 100644
--- a/package.json
+++ b/package.json
@@ -58,7 +58,7 @@
     "leaflet": "^1.1.0",
     "localforage": "^1.5.0",
     "localstorage-memory": "^1.0.2",
-    "lodash": "^4.17.4",
+    "lodash": "^4.17.21",
     "mkdirp": "^0.5.1",
     "moment": "^2.18.1",
     "mongodb": "^2.2.29",
diff --git a/yarn.lock b/yarn.lock
index f45ec0b..51cd5ad 100644
--- a/yarn.lock
+++ b/yarn.lock
@@ -3882,9 +3882,9 @@ lodash@^3.2.0:
   version "3.10.1"
   resolved "https://registry.yarnpkg.com/lodash/-/lodash-3.10.1.tgz#5bf45e8e49ba4189e17d482789dfd15bd140b7b6"
 
-lodash@^4.0.0, lodash@^4.11.1, lodash@^4.13.1, lodash@^4.14.0, lodash@^4.15.0, lodash@^4.17.3, lodash@^4.17.4, lodash@^4.2.0, lodash@^4.2.1, lodash@^4.3.0, lodash@^4.6.1:
-  version "4.17.4"
-  resolved "https://registry.yarnpkg.com/lodash/-/lodash-4.17.4.tgz#78203a4d1c328ae1d86dca6460e369b57f4055ae"
+lodash@^4.0.0, lodash@^4.11.1, lodash@^4.13.1, lodash@^4.14.0, lodash@^4.15.0, lodash@^4.17.21, lodash@^4.17.3, lodash@^4.17.4, lodash@^4.2.0, lodash@^4.2.1, lodash@^4.3.0, lodash@^4.6.1:
+  version "4.17.21"
+  resolved "https://registry.yarnpkg.com/lodash/-/lodash-4.17.21.tgz#679591c564c3bffaae8454cf0b3df370c3d6911c"
 
 lodash@~2.4.1:
   version "2.4.2"