diff --git a/packages/webamp-modern/package.json b/packages/webamp-modern/package.json
index 90cd69d5..52e055ba 100644
--- a/packages/webamp-modern/package.json
+++ b/packages/webamp-modern/package.json
@@ -91,7 +91,7 @@
     "jest-image-snapshot": "^2.12.0",
     "jest-puppeteer": "^4.4.0",
     "jszip": "^3.1.3",
-    "lodash": "^4.17.11",
+    "lodash": "^4.17.21",
     "milkdrop-preset-converter-aws": "^0.1.6",
     "music-metadata-browser": "^0.6.1",
     "postcss": "^7.0.18",
diff --git a/packages/webamp/package.json b/packages/webamp/package.json
index e9528c07..dcd36366 100644
--- a/packages/webamp/package.json
+++ b/packages/webamp/package.json
@@ -141,7 +141,7 @@
     "fscreen": "^1.0.2",
     "invariant": "^2.2.3",
     "jszip": "^3.1.3",
-    "lodash": "^4.17.11",
+    "lodash": "^4.17.21",
     "milkdrop-preset-converter-aws": "^0.1.6",
     "music-metadata-browser": "^0.6.1",
     "react": "^17.0.1",
diff --git a/yarn.lock b/yarn.lock
index c855e8e0..036350d8 100644
--- a/yarn.lock
+++ b/yarn.lock
@@ -9947,13 +9947,10 @@ lodash.uniq@^4.5.0:
   version "4.5.0"
   resolved "https://registry.yarnpkg.com/lodash.uniq/-/lodash.uniq-4.5.0.tgz#d0225373aeb652adc1bc82e4945339a842754773"
 
-lodash@^4.15.0, lodash@^4.17.11, lodash@^4.17.13, lodash@^4.17.14, lodash@^4.17.15, lodash@^4.17.3, lodash@^4.17.4:
-  version "4.17.15"
-  resolved "https://registry.yarnpkg.com/lodash/-/lodash-4.17.15.tgz#b447f6670a0455bbfeedd11392eff330ea097548"
-
-lodash@^4.17.19, lodash@^4.17.20:
-  version "4.17.20"
-  resolved "https://registry.yarnpkg.com/lodash/-/lodash-4.17.20.tgz#b44a9b6297bcb698f1c51a3545a2b3b368d59c52"
+lodash@^4.15.0, lodash@^4.17.11, lodash@^4.17.13, lodash@^4.17.14, lodash@^4.17.15, lodash@^4.17.19, lodash@^4.17.20, lodash@^4.17.21, lodash@^4.17.3, lodash@^4.17.4:
+  version "4.17.21"
+  resolved "https://registry.yarnpkg.com/lodash/-/lodash-4.17.21.tgz#679591c564c3bffaae8454cf0b3df370c3d6911c"
+  integrity sha512-v2kDEe57lecTulaDIuNTPy3Ry4gLGJ6Z1O3vE1krgXZNrsQ+LFTGHVxVjcXPs17LhbZVGedAJv8XZ1tvj5FvSg==
 
 logalot@^2.0.0:
   version "2.1.0"