diff --git a/app/package.json b/app/package.json
index 31cfadb6..fc456e50 100644
--- a/app/package.json
+++ b/app/package.json
@@ -21,7 +21,7 @@
     "file-uri-to-path": "2.0.0",
     "fs-extra": "9.1.0",
     "git-describe": "4.0.4",
-    "lodash": "4.17.20",
+    "lodash": "4.17.21",
     "mkdirp": "1.0.4",
     "ms": "2.1.3",
     "node-pty": "0.10.0",
diff --git a/app/yarn.lock b/app/yarn.lock
index bcd2a725..17ca4294 100644
--- a/app/yarn.lock
+++ b/app/yarn.lock
@@ -440,10 +440,10 @@ locate-path@^3.0.0:
     p-locate "^3.0.0"
     path-exists "^3.0.0"
 
-lodash@4.17.20, lodash@^4.17.11:
-  version "4.17.20"
-  resolved "https://registry.npmjs.org/lodash/-/lodash-4.17.20.tgz#b44a9b6297bcb698f1c51a3545a2b3b368d59c52"
-  integrity sha512-PlhdFcillOINfeV7Ni6oF1TAEayyZBoZ8bcshTHqOYJYlrqzRK5hagpagky5o4HfCzzd1TRkXPMFq6cKk9rGmA==
+lodash@4.17.21, lodash@^4.17.11:
+  version "4.17.21"
+  resolved "https://registry.npmjs.org/lodash/-/lodash-4.17.21.tgz#679591c564c3bffaae8454cf0b3df370c3d6911c"
+  integrity sha512-v2kDEe57lecTulaDIuNTPy3Ry4gLGJ6Z1O3vE1krgXZNrsQ+LFTGHVxVjcXPs17LhbZVGedAJv8XZ1tvj5FvSg==
 
 loose-envify@^1.1.0:
   version "1.4.0"