diff --git a/package.json b/package.json
index 153e6b7..1e0871a 100644
--- a/package.json
+++ b/package.json
@@ -20,7 +20,7 @@
     "babel-preset-env": "^1.6.1",
     "docdash": "^0.4.0",
     "jsdoc": "^3.5.5",
-    "lodash": "^4.17.4",
+    "lodash": "^4.17.19",
     "mkdirp-promise": "^5.0.1",
     "mocha": "^4.0.1",
     "must": "^0.13.4"
diff --git a/yarn.lock b/yarn.lock
index 5a8a7d5..73bb9f9 100644
--- a/yarn.lock
+++ b/yarn.lock
@@ -1218,9 +1218,9 @@ lodash._root@^3.0.0:
   dependencies:
     lodash._createwrapper "^3.0.0"
 
-lodash@^4.17.4:
-  version "4.17.4"
-  resolved "https://registry.yarnpkg.com/lodash/-/lodash-4.17.4.tgz#78203a4d1c328ae1d86dca6460e369b57f4055ae"
+lodash@^4.17.19, lodash@^4.17.4:
+  version "4.17.19"
+  resolved "https://registry.yarnpkg.com/lodash/-/lodash-4.17.19.tgz#e48ddedbe30b3321783c5b4301fbd353bc1e4a4b"
 
 loose-envify@^1.0.0:
   version "1.3.1"