diff --git a/package-lock.json b/package-lock.json
index ef8f78d..8e04b9c 100644
--- a/package-lock.json
+++ b/package-lock.json
@@ -2943,9 +2943,9 @@
             }
         },
         "lodash": {
-            "version": "4.17.15",
-            "resolved": "https://registry.npmjs.org/lodash/-/lodash-4.17.15.tgz",
-            "integrity": "sha512-8xOcRHvCjnocdS5cpwXQXVzmmh5e5+saE2QGoeQmbKmRS6J3VQppPOIt0MnmE+4xlZoumy0GPG0D0MVIQbNA1A=="
+            "version": "4.17.21",
+            "resolved": "https://registry.npmjs.org/lodash/-/lodash-4.17.21.tgz",
+            "integrity": "sha512-v2kDEe57lecTulaDIuNTPy3Ry4gLGJ6Z1O3vE1krgXZNrsQ+LFTGHVxVjcXPs17LhbZVGedAJv8XZ1tvj5FvSg=="
         },
         "loglevel": {
             "version": "1.6.8",
diff --git a/package.json b/package.json
index 148fdf8..99f34d1 100644
--- a/package.json
+++ b/package.json
@@ -28,7 +28,7 @@
     "dependencies": {
         "@tonaljs/midi": "^3.3.1",
         "gulp": "^4.0.2",
-        "lodash": "^4.17.15",
+        "lodash": "^4.17.21",
         "stats.js": "^0.17.0",
         "three": "^0.105.2",
         "tonal": "^2.2.2",