diff --git a/packages/buttons-api/package-lock.json b/packages/buttons-api/package-lock.json
index f54e22e..6550448 100644
--- a/packages/buttons-api/package-lock.json
+++ b/packages/buttons-api/package-lock.json
@@ -161,9 +161,9 @@
 			}
 		},
 		"lodash": {
-			"version": "4.17.11",
-			"resolved": "https://registry.npmjs.org/lodash/-/lodash-4.17.11.tgz",
-			"integrity": "sha512-cQKh8igo5QUhZ7lg38DYWAxMvjSAKG0A8wGSVimP07SIUEK2UO+arSRKbRZWtelMtN5V0Hkwh5ryOto/SshYIg=="
+			"version": "4.17.21",
+			"resolved": "https://registry.npmjs.org/lodash/-/lodash-4.17.21.tgz",
+			"integrity": "sha512-v2kDEe57lecTulaDIuNTPy3Ry4gLGJ6Z1O3vE1krgXZNrsQ+LFTGHVxVjcXPs17LhbZVGedAJv8XZ1tvj5FvSg=="
 		},
 		"media-typer": {
 			"version": "0.3.0",
diff --git a/packages/buttons-api/package.json b/packages/buttons-api/package.json
index 6f57f5d..8a14551 100644
--- a/packages/buttons-api/package.json
+++ b/packages/buttons-api/package.json
@@ -7,6 +7,6 @@
     "koa-csrf": "^3.0.7",
     "koa-router": "^7.4.0",
     "koa2-cas": "^1.0.5",
-    "lodash": "^4.17.11"
+    "lodash": "^4.17.21"
   }
 }