diff --git a/package.json b/package.json
index 5ba5e7e..4db9aba 100644
--- a/package.json
+++ b/package.json
@@ -16,7 +16,7 @@
     "@turf/bbox-polygon": "^6.5.0",
     "cors": "^2.8.5",
     "express": "^4.17.1",
-    "lodash": "^4.17.11",
+    "lodash": "^4.17.21",
     "lunr": "1.0.0",
     "morgan": "^1.9.1",
     "rbush": "^2.0.1"
diff --git a/yarn.lock b/yarn.lock
index 3e01376..9493263 100644
--- a/yarn.lock
+++ b/yarn.lock
@@ -2368,14 +2368,10 @@ lodash.zip@^4.2.0:
   version "4.2.0"
   resolved "https://registry.npmjs.org/lodash.zip/-/lodash.zip-4.2.0.tgz"
 
-lodash@^4.13.1, lodash@^4.17.10, lodash@^4.17.4:
-  version "4.17.10"
-  resolved "https://registry.npmjs.org/lodash/-/lodash-4.17.10.tgz"
-
-lodash@^4.17.11:
-  version "4.17.11"
-  resolved "https://registry.npmjs.org/lodash/-/lodash-4.17.11.tgz"
-  integrity sha512-cQKh8igo5QUhZ7lg38DYWAxMvjSAKG0A8wGSVimP07SIUEK2UO+arSRKbRZWtelMtN5V0Hkwh5ryOto/SshYIg==
+lodash@^4.13.1, lodash@^4.17.10, lodash@^4.17.11, lodash@^4.17.21, lodash@^4.17.4:
+  version "4.17.21"
+  resolved "https://registry.yarnpkg.com/lodash/-/lodash-4.17.21.tgz#679591c564c3bffaae8454cf0b3df370c3d6911c"
+  integrity sha512-v2kDEe57lecTulaDIuNTPy3Ry4gLGJ6Z1O3vE1krgXZNrsQ+LFTGHVxVjcXPs17LhbZVGedAJv8XZ1tvj5FvSg==
 
 log-symbols@^2.0.0:
   version "2.2.0"