diff --git a/package-lock.json b/package-lock.json
index 9b6baf764738..6de6edae81c0 100644
--- a/package-lock.json
+++ b/package-lock.json
@@ -17,7 +17,7 @@
                 "iconv-lite": "^0.6.3",
                 "inversify": "^6.0.2",
                 "jsonc-parser": "^3.0.0",
-                "lodash": "^4.17.23",
+                "lodash": "^4.18.1",
                 "minimatch": "^5.1.8",
                 "named-js-regexp": "^1.3.3",
                 "node-stream-zip": "^1.6.0",
@@ -9658,9 +9658,9 @@
             }
         },
         "node_modules/lodash": {
-            "version": "4.17.23",
-            "resolved": "https://registry.npmjs.org/lodash/-/lodash-4.17.23.tgz",
-            "integrity": "sha512-LgVTMpQtIopCi79SJeDiP0TfWi5CNEc/L/aRdTh3yIvmZXTnheWpKjSZhnvMl8iXbC1tFg9gdHHDMLoV7CnG+w=="
+            "version": "4.18.1",
+            "resolved": "https://registry.npmjs.org/lodash/-/lodash-4.18.1.tgz",
+            "integrity": "sha512-dMInicTPVE8d1e5otfwmmjlxkZoUpiVLwyeTdUsi/Caj/gfzzblBcCE5sRHV/AsjuCmxWrte2TNGSYuCeCq+0Q=="
         },
         "node_modules/lodash.flattendeep": {
             "version": "4.4.0",
@@ -22757,9 +22757,9 @@
             }
         },
         "lodash": {
-            "version": "4.17.23",
-            "resolved": "https://registry.npmjs.org/lodash/-/lodash-4.17.23.tgz",
-            "integrity": "sha512-LgVTMpQtIopCi79SJeDiP0TfWi5CNEc/L/aRdTh3yIvmZXTnheWpKjSZhnvMl8iXbC1tFg9gdHHDMLoV7CnG+w=="
+            "version": "4.18.1",
+            "resolved": "https://registry.npmjs.org/lodash/-/lodash-4.18.1.tgz",
+            "integrity": "sha512-dMInicTPVE8d1e5otfwmmjlxkZoUpiVLwyeTdUsi/Caj/gfzzblBcCE5sRHV/AsjuCmxWrte2TNGSYuCeCq+0Q=="
         },
         "lodash.flattendeep": {
             "version": "4.4.0",
diff --git a/package.json b/package.json
index 2a685fbc158e..2a27cddc0976 100644
--- a/package.json
+++ b/package.json
@@ -1713,7 +1713,7 @@
         "iconv-lite": "^0.6.3",
         "inversify": "^6.0.2",
         "jsonc-parser": "^3.0.0",
-        "lodash": "^4.17.23",
+        "lodash": "^4.18.1",
         "minimatch": "^5.1.8",
         "named-js-regexp": "^1.3.3",
         "node-stream-zip": "^1.6.0",