diff --git a/server/package.json b/server/package.json
index 11f0360..e3f3013 100644
--- a/server/package.json
+++ b/server/package.json
@@ -22,7 +22,7 @@
     "koa-router": "^7.2.1",
     "koa-send": "^5.0.0",
     "koa-static": "^5.0.0",
-    "lodash": "^4.17.4",
+    "lodash": "^4.17.13",
     "mailgun-js": "^0.22.0",
     "moment": "^2.18.1",
     "redis": "^2.8.0",
diff --git a/server/yarn.lock b/server/yarn.lock
index 029a370..7ca42a9 100644
--- a/server/yarn.lock
+++ b/server/yarn.lock
@@ -3693,10 +3693,10 @@ locate-path@^3.0.0:
     p-locate "^3.0.0"
     path-exists "^3.0.0"
 
-lodash@^4.17.10, lodash@^4.17.11, lodash@^4.17.4, lodash@^4.3.0:
-  version "4.17.11"
-  resolved "https://registry.yarnpkg.com/lodash/-/lodash-4.17.11.tgz#b39ea6229ef607ecd89e2c8df12536891cac9b8d"
-  integrity sha512-cQKh8igo5QUhZ7lg38DYWAxMvjSAKG0A8wGSVimP07SIUEK2UO+arSRKbRZWtelMtN5V0Hkwh5ryOto/SshYIg==
+lodash@^4.17.10, lodash@^4.17.11, lodash@^4.17.13, lodash@^4.17.4, lodash@^4.3.0:
+  version "4.17.13"
+  resolved "https://registry.yarnpkg.com/lodash/-/lodash-4.17.13.tgz#0bdc3a6adc873d2f4e0c4bac285df91b64fc7b93"
+  integrity sha512-vm3/XWXfWtRua0FkUyEHBZy8kCPjErNBT9fJx8Zvs+U6zjqPbTUOpkaoum3O5uiA8sm+yNMHXfYkTUHFoMxFNA==
 
 loose-envify@^1.0.0:
   version "1.4.0"