diff --git a/services/idp/package.json b/services/idp/package.json
index f0059ad6e46..e67b0eec005 100644
--- a/services/idp/package.json
+++ b/services/idp/package.json
@@ -171,7 +171,7 @@
       "glob": "10.5.0",
       "minimatch@>=9.0.0 <9.0.7": "9.0.7",
       "js-yaml": ">=4.1.1",
-      "lodash": ">=4.17.23",
+      "lodash": ">=4.18.1",
       "undici": ">=7.18.2",
       "vue-template-compiler": "^3.0.0",
       "brace-expansion@>=1.0.0 <=1.1.11": ">=1.1.12",
diff --git a/services/idp/pnpm-lock.yaml b/services/idp/pnpm-lock.yaml
index cab46d700fe..4bca2638e72 100644
--- a/services/idp/pnpm-lock.yaml
+++ b/services/idp/pnpm-lock.yaml
@@ -8,7 +8,7 @@ overrides:
   glob: 10.5.0
   minimatch@>=9.0.0 <9.0.7: 9.0.7
   js-yaml: '>=4.1.1'
-  lodash: '>=4.17.23'
+  lodash: '>=4.18.1'
   undici: '>=7.18.2'
   vue-template-compiler: ^3.0.0
   brace-expansion@>=1.0.0 <=1.1.11: '>=1.1.12'
@@ -4690,8 +4690,8 @@ packages:
   lodash.uniq@4.5.0:
     resolution: {integrity: sha512-xfBaXQd9ryd9dlSDvnvI0lvxfLJlYAZzXomUYzLKtUeOQvOP5piqAWuGtrhWeqaXK9hhoM/iyJc5AV+XfsX3HQ==}
 
-  lodash@4.17.23:
-    resolution: {integrity: sha512-LgVTMpQtIopCi79SJeDiP0TfWi5CNEc/L/aRdTh3yIvmZXTnheWpKjSZhnvMl8iXbC1tFg9gdHHDMLoV7CnG+w==}
+  lodash@4.18.1:
+    resolution: {integrity: sha512-dMInicTPVE8d1e5otfwmmjlxkZoUpiVLwyeTdUsi/Caj/gfzzblBcCE5sRHV/AsjuCmxWrte2TNGSYuCeCq+0Q==}
 
   loose-envify@1.4.0:
     resolution: {integrity: sha512-lyuxPGr/Wfhrlem2CL/UcnUc1zcqKAImBDzukY7Y5F/yQiNdko6+fRLevlw1HgMySw7f611UIY408EtxRSoK3Q==}
@@ -8807,7 +8807,7 @@ snapshots:
       aria-query: 5.3.0
       css.escape: 1.5.1
       dom-accessibility-api: 0.6.3
-      lodash: 4.17.23
+      lodash: 4.18.1
       picocolors: 1.1.1
       redent: 3.0.0
 
@@ -10679,12 +10679,12 @@ snapshots:
       '@babel/plugin-syntax-flow': 7.24.7(@babel/core@7.28.6)
       '@babel/plugin-transform-react-jsx': 7.27.1(@babel/core@7.28.6)
       eslint: 8.57.1
-      lodash: 4.17.23
+      lodash: 4.18.1
       string-natural-compare: 3.0.1
 
   eslint-plugin-i18next@6.1.3:
     dependencies:
-      lodash: 4.17.23
+      lodash: 4.18.1
       requireindex: 1.1.0
 
   eslint-plugin-import@2.32.0(@typescript-eslint/parser@5.62.0(eslint@8.57.1)(typescript@5.9.3))(eslint@8.57.1):
@@ -11349,7 +11349,7 @@ snapshots:
     dependencies:
       '@types/html-minifier-terser': 6.1.0
       html-minifier-terser: 6.1.0
-      lodash: 4.17.23
+      lodash: 4.18.1
       pretty-error: 4.0.0
       tapable: 2.3.0
     optionalDependencies:
@@ -12192,7 +12192,7 @@ snapshots:
 
   lodash.uniq@4.5.0: {}
 
-  lodash@4.17.23: {}
+  lodash@4.18.1: {}
 
   loose-envify@1.4.0:
     dependencies:
@@ -13027,7 +13027,7 @@ snapshots:
 
   pretty-error@4.0.0:
     dependencies:
-      lodash: 4.17.23
+      lodash: 4.18.1
       renderkid: 3.0.0
 
   pretty-format@27.5.1:
@@ -13371,7 +13371,7 @@ snapshots:
       css-select: 4.3.0
       dom-converter: 0.2.0
       htmlparser2: 6.1.0
-      lodash: 4.17.23
+      lodash: 4.18.1
       strip-ansi: 6.0.1
 
   replace-ext@2.0.0: {}
@@ -13610,7 +13610,7 @@ snapshots:
       escape-html: 1.0.3
       glob: 10.5.0
       gzip-size: 6.0.0
-      lodash: 4.17.23
+      lodash: 4.18.1
       open: 7.4.2
       source-map: 0.7.4
       temp: 0.9.4
@@ -14340,7 +14340,7 @@ snapshots:
       fast-json-stable-stringify: 2.1.0
       fs-extra: 9.1.0
       glob: 10.5.0
-      lodash: 4.17.23
+      lodash: 4.18.1
       pretty-bytes: 5.6.0
       rollup: 2.80.0
       source-map: 0.8.0-beta.0