diff --git a/metaspace/graphql/package.json b/metaspace/graphql/package.json
index a10ea5a72..f9555d60f 100644
--- a/metaspace/graphql/package.json
+++ b/metaspace/graphql/package.json
@@ -78,7 +78,7 @@
     "jsondiffpatch": "^0.3.9",
     "jsonwebtoken": "^9.0.0",
     "knex": "^0.21.2",
-    "lodash": "^4.17.23",
+    "lodash": "^4.18.1",
     "memory-cache": "^0.2.0",
     "merge-graphql-schemas": "^1.5.3",
     "mkdirp": "^0.5.1",
diff --git a/metaspace/graphql/yarn.lock b/metaspace/graphql/yarn.lock
index cd36da7c3..f8dbe9e93 100644
--- a/metaspace/graphql/yarn.lock
+++ b/metaspace/graphql/yarn.lock
@@ -5919,10 +5919,10 @@ lodash.uniqby@4.5.0:
     lodash._baseiteratee "~4.7.0"
     lodash._baseuniq "~4.6.0"
 
-lodash@^4.13.1, lodash@^4.17.13, lodash@^4.17.15, lodash@^4.17.19, lodash@^4.17.20, lodash@^4.17.21, lodash@^4.17.23, lodash@^4.17.4:
-  version "4.17.23"
-  resolved "https://registry.yarnpkg.com/lodash/-/lodash-4.17.23.tgz#f113b0378386103be4f6893388c73d0bde7f2c5a"
-  integrity sha512-LgVTMpQtIopCi79SJeDiP0TfWi5CNEc/L/aRdTh3yIvmZXTnheWpKjSZhnvMl8iXbC1tFg9gdHHDMLoV7CnG+w==
+lodash@^4.13.1, lodash@^4.17.13, lodash@^4.17.15, lodash@^4.17.19, lodash@^4.17.20, lodash@^4.17.21, lodash@^4.17.4, lodash@^4.18.1:
+  version "4.18.1"
+  resolved "https://registry.yarnpkg.com/lodash/-/lodash-4.18.1.tgz#ff2b66c1f6326d59513de2407bf881439812771c"
+  integrity sha512-dMInicTPVE8d1e5otfwmmjlxkZoUpiVLwyeTdUsi/Caj/gfzzblBcCE5sRHV/AsjuCmxWrte2TNGSYuCeCq+0Q==
 
 logform@^2.6.0, logform@^2.6.1:
   version "2.6.1"