diff --git a/package.json b/package.json
index af61a9cf4..e01119a93 100644
--- a/package.json
+++ b/package.json
@@ -62,7 +62,7 @@
     "ix": "^3.0.2",
     "jaeger-client": "^3.17.2",
     "json5": "^2.1.1",
-    "lodash": "^4.17.15",
+    "lodash": "^4.17.19",
     "mkdirp-promise": "^5.0.1",
     "mz": "^2.7.0",
     "npm-registry-fetch": "^8.0.0",
diff --git a/yarn.lock b/yarn.lock
index 14612b8cb..a68fac57a 100644
--- a/yarn.lock
+++ b/yarn.lock
@@ -4366,10 +4366,10 @@ lodash.uniq@^4.5.0:
   resolved "https://registry.npmjs.org/lodash.uniq/-/lodash.uniq-4.5.0.tgz#d0225373aeb652adc1bc82e4945339a842754773"
   integrity sha1-0CJTc662Uq3BvILklFM5qEJ1R3M=
 
-lodash@^4.17.11, lodash@^4.17.13, lodash@^4.17.15, lodash@^4.17.4:
-  version "4.17.15"
-  resolved "https://registry.npmjs.org/lodash/-/lodash-4.17.15.tgz#b447f6670a0455bbfeedd11392eff330ea097548"
-  integrity sha512-8xOcRHvCjnocdS5cpwXQXVzmmh5e5+saE2QGoeQmbKmRS6J3VQppPOIt0MnmE+4xlZoumy0GPG0D0MVIQbNA1A==
+lodash@^4.17.11, lodash@^4.17.13, lodash@^4.17.15, lodash@^4.17.19, lodash@^4.17.4:
+  version "4.17.19"
+  resolved "https://registry.npmjs.org/lodash/-/lodash-4.17.19.tgz#e48ddedbe30b3321783c5b4301fbd353bc1e4a4b"
+  integrity sha512-JNvd8XER9GQX0v2qJgsaN/mzFCNA5BRe/j8JN9d+tWyGLSodKQHKFicdwNYzWwI3wjRnaKPsGj1XkBjx/F96DQ==
 
 log-symbols@^2.2.0:
   version "2.2.0"