diff --git a/api/package.json b/api/package.json
index 8357b18fe9..3505f21e72 100644
--- a/api/package.json
+++ b/api/package.json
@@ -71,7 +71,7 @@
     "keygrip": "^1.1.0",
     "linkify-it": "^2.1.0",
     "localstorage-memory": "^1.0.3",
-    "lodash": "^4.17.11",
+    "lodash": "^4.17.21",
     "lodash.intersection": "^4.4.0",
     "longjohn": "^0.2.12",
     "moment": "^2.24.0",
diff --git a/api/yarn.lock b/api/yarn.lock
index 8d9aecdd48..b4fdf4872c 100644
--- a/api/yarn.lock
+++ b/api/yarn.lock
@@ -6482,10 +6482,10 @@ lodash.values@^4.3.0:
   resolved "https://registry.yarnpkg.com/lodash.values/-/lodash.values-4.3.0.tgz#a3a6c2b0ebecc5c2cba1c17e6e620fe81b53d347"
   integrity sha1-o6bCsOvsxcLLocF+bmIP6BtT00c=
 
-lodash@^4.0.0, lodash@^4.17.10, lodash@^4.17.11, lodash@^4.17.4, lodash@^4.2.1, lodash@^4.7.0:
-  version "4.17.11"
-  resolved "https://registry.yarnpkg.com/lodash/-/lodash-4.17.11.tgz#b39ea6229ef607ecd89e2c8df12536891cac9b8d"
-  integrity sha512-cQKh8igo5QUhZ7lg38DYWAxMvjSAKG0A8wGSVimP07SIUEK2UO+arSRKbRZWtelMtN5V0Hkwh5ryOto/SshYIg==
+lodash@^4.0.0, lodash@^4.17.10, lodash@^4.17.11, lodash@^4.17.21, lodash@^4.17.4, lodash@^4.2.1, lodash@^4.7.0:
+  version "4.17.21"
+  resolved "https://registry.yarnpkg.com/lodash/-/lodash-4.17.21.tgz#679591c564c3bffaae8454cf0b3df370c3d6911c"
+  integrity sha512-v2kDEe57lecTulaDIuNTPy3Ry4gLGJ6Z1O3vE1krgXZNrsQ+LFTGHVxVjcXPs17LhbZVGedAJv8XZ1tvj5FvSg==
 
 long@^4.0.0:
   version "4.0.0"