diff --git a/package.json b/package.json
index 000f926..cf0f109 100644
--- a/package.json
+++ b/package.json
@@ -19,7 +19,7 @@
     "browser-sync": "^2.18.13",
     "browser-sync-webpack-plugin": "^1.2.0",
     "html-webpack-plugin": ">=2.29.0",
-    "lodash": "^4.17.4",
+    "lodash": "^4.17.21",
     "pug": ">=2.0.0-rc.2",
     "pug-loader": ">=2.3.0",
     "webpack": ">=3.0.0",
diff --git a/yarn.lock b/yarn.lock
index c71ecda..d59619a 100644
--- a/yarn.lock
+++ b/yarn.lock
@@ -3105,13 +3105,9 @@ lodash@^3.10.1:
   version "3.10.1"
   resolved "https://registry.yarnpkg.com/lodash/-/lodash-3.10.1.tgz#5bf45e8e49ba4189e17d482789dfd15bd140b7b6"
 
-lodash@^4, lodash@^4.14.0, lodash@^4.17.3, lodash@^4.17.4, lodash@^4.2.0:
-  version "4.17.4"
-  resolved "https://registry.yarnpkg.com/lodash/-/lodash-4.17.4.tgz#78203a4d1c328ae1d86dca6460e369b57f4055ae"
-
-lodash@^4.17.5:
-  version "4.17.11"
-  resolved "https://registry.yarnpkg.com/lodash/-/lodash-4.17.11.tgz#b39ea6229ef607ecd89e2c8df12536891cac9b8d"
+lodash@^4, lodash@^4.14.0, lodash@^4.17.21, lodash@^4.17.3, lodash@^4.17.5, lodash@^4.2.0:
+  version "4.17.21"
+  resolved "https://registry.yarnpkg.com/lodash/-/lodash-4.17.21.tgz#679591c564c3bffaae8454cf0b3df370c3d6911c"
 
 loglevel@^1.4.1:
   version "1.4.1"