diff --git a/package-lock.json b/package-lock.json
index e91d593..2c36c46 100644
--- a/package-lock.json
+++ b/package-lock.json
@@ -701,6 +701,13 @@
         "entities": "1.1.1",
         "htmlparser2": "3.8.3",
         "lodash": "2.4.2"
+      },
+      "dependencies": {
+        "lodash": {
+          "version": "2.4.2",
+          "resolved": "https://registry.npmjs.org/lodash/-/lodash-2.4.2.tgz",
+          "integrity": "sha1-+t2DS5aDBz2hebPq5tnA0VBT9z4="
+        }
       }
     },
     "chokidar": {
@@ -3646,9 +3653,9 @@
       }
     },
     "lodash": {
-      "version": "2.4.2",
-      "resolved": "https://registry.npmjs.org/lodash/-/lodash-2.4.2.tgz",
-      "integrity": "sha1-+t2DS5aDBz2hebPq5tnA0VBT9z4="
+      "version": "4.17.19",
+      "resolved": "https://registry.npmjs.org/lodash/-/lodash-4.17.19.tgz",
+      "integrity": "sha512-JNvd8XER9GQX0v2qJgsaN/mzFCNA5BRe/j8JN9d+tWyGLSodKQHKFicdwNYzWwI3wjRnaKPsGj1XkBjx/F96DQ=="
     },
     "lodash._baseassign": {
       "version": "3.2.0",
diff --git a/package.json b/package.json
index 19741dd..1703ab9 100644
--- a/package.json
+++ b/package.json
@@ -20,7 +20,7 @@
     "jsdom": "^11.6.2",
     "jsonwebtoken": "",
     "kerberos": "0.0.17",
-    "lodash": "^2.4.1",
+    "lodash": "^4.17.19",
     "mathjs": "^3.18.0",
     "md5": "^2.2.1",
     "memwatch-next": "^0.2.10",