diff --git a/backend/package-lock.json b/backend/package-lock.json
index 015f40aa..87971eb7 100644
--- a/backend/package-lock.json
+++ b/backend/package-lock.json
@@ -7612,9 +7612,9 @@
             }
         },
         "lodash": {
-            "version": "4.17.15",
-            "resolved": "https://registry.npmjs.org/lodash/-/lodash-4.17.15.tgz",
-            "integrity": "sha512-8xOcRHvCjnocdS5cpwXQXVzmmh5e5+saE2QGoeQmbKmRS6J3VQppPOIt0MnmE+4xlZoumy0GPG0D0MVIQbNA1A=="
+            "version": "4.17.19",
+            "resolved": "https://registry.npmjs.org/lodash/-/lodash-4.17.19.tgz",
+            "integrity": "sha512-JNvd8XER9GQX0v2qJgsaN/mzFCNA5BRe/j8JN9d+tWyGLSodKQHKFicdwNYzWwI3wjRnaKPsGj1XkBjx/F96DQ=="
         },
         "lodash.includes": {
             "version": "4.3.0",
diff --git a/backend/package.json b/backend/package.json
index 40f53887..3e0b8782 100644
--- a/backend/package.json
+++ b/backend/package.json
@@ -43,7 +43,7 @@
         "express-validator": "^6.4.0",
         "fbgraph": "^1.4.4",
         "jsonwebtoken": "^8.5.1",
-        "lodash": "^4.17.15",
+        "lodash": "^4.17.19",
         "lusca": "^1.6.1",
         "micromatch": "^4.0.2",
         "moment": "^2.24.0",