diff --git a/package.json b/package.json
index b652627..d249d0a 100644
--- a/package.json
+++ b/package.json
@@ -25,7 +25,7 @@
     "http-status-codes": "^1.3.0",
     "jsonwebtoken": "^8.2.1",
     "limax": "^1.6.0",
-    "lodash": "^4.17.10",
+    "lodash": "^4.17.21",
     "mailchimp-api-v3": "^1.12.0",
     "mjml": "^4.1.1",
     "moment": "^2.22.2",
diff --git a/yarn.lock b/yarn.lock
index 697269f..627c60e 100644
--- a/yarn.lock
+++ b/yarn.lock
@@ -1019,7 +1019,7 @@ etag@~1.8.1:
 
 event-stream@~3.3.0:
   version "3.3.4"
-  resolved "http://registry.npmjs.org/event-stream/-/event-stream-3.3.4.tgz#4ab4c9a0f5a54db9338b4c34d86bfce8f4b35571"
+  resolved "https://registry.npmjs.org/event-stream/-/event-stream-3.3.4.tgz#4ab4c9a0f5a54db9338b4c34d86bfce8f4b35571"
   dependencies:
     duplexer "~0.1.1"
     from "~0"
@@ -1917,9 +1917,9 @@ lodash.unescape@^4.0.1:
   version "4.0.1"
   resolved "https://registry.yarnpkg.com/lodash.unescape/-/lodash.unescape-4.0.1.tgz#bf2249886ce514cda112fae9218cdc065211fc9c"
 
-lodash@^4.17.10, lodash@^4.17.2, lodash@^4.17.4, lodash@^4.3.0:
-  version "4.17.10"
-  resolved "https://registry.yarnpkg.com/lodash/-/lodash-4.17.10.tgz#1b7793cf7259ea38fb3661d4d38b3260af8ae4e7"
+lodash@^4.17.10, lodash@^4.17.2, lodash@^4.17.21, lodash@^4.17.4, lodash@^4.3.0:
+  version "4.17.21"
+  resolved "https://registry.yarnpkg.com/lodash/-/lodash-4.17.21.tgz#679591c564c3bffaae8454cf0b3df370c3d6911c"
 
 loose-envify@^1.0.0:
   version "1.4.0"