diff --git a/SecurityLab/package.json b/SecurityLab/package.json
index 7da840c..bb8505e 100644
--- a/SecurityLab/package.json
+++ b/SecurityLab/package.json
@@ -4,7 +4,7 @@
   "private": true,
   "description": "Security lab only: intentionally outdated/vulnerable npm dependencies to trigger Dependabot alerts. Do NOT install into production.",
   "dependencies": {
-    "lodash": "4.17.15",
+    "lodash": "4.18.1",
     "axios": "0.18.0",
     "minimist": "1.2.0",
     "jquery": "3.4.0",