diff --git a/tools/challenge-parser/package-lock.json b/tools/challenge-parser/package-lock.json
index 588e40f5bc..bf2d1ad4b4 100644
--- a/tools/challenge-parser/package-lock.json
+++ b/tools/challenge-parser/package-lock.json
@@ -220,9 +220,9 @@
       }
     },
     "lodash": {
-      "version": "4.17.20",
-      "resolved": "https://registry.npmjs.org/lodash/-/lodash-4.17.20.tgz",
-      "integrity": "sha512-PlhdFcillOINfeV7Ni6oF1TAEayyZBoZ8bcshTHqOYJYlrqzRK5hagpagky5o4HfCzzd1TRkXPMFq6cKk9rGmA=="
+      "version": "4.17.21",
+      "resolved": "https://registry.npmjs.org/lodash/-/lodash-4.17.21.tgz",
+      "integrity": "sha512-v2kDEe57lecTulaDIuNTPy3Ry4gLGJ6Z1O3vE1krgXZNrsQ+LFTGHVxVjcXPs17LhbZVGedAJv8XZ1tvj5FvSg=="
     },
     "lodash.iteratee": {
       "version": "4.7.0",
diff --git a/tools/challenge-parser/package.json b/tools/challenge-parser/package.json
index bba3e4d18a..3d97c9bf12 100644
--- a/tools/challenge-parser/package.json
+++ b/tools/challenge-parser/package.json
@@ -24,7 +24,7 @@
   "dependencies": {
     "hast-util-to-html": "7.1.3",
     "js-yaml": "3.14.1",
-    "lodash": "4.17.20",
+    "lodash": "4.17.21",
     "mdast-builder": "1.1.1",
     "mdast-util-gfm": "0.1.2",
     "mdast-util-to-hast": "9.1.2",
diff --git a/tools/scripts/build/package-lock.json b/tools/scripts/build/package-lock.json
index 042aae9d73..95628413ad 100644
--- a/tools/scripts/build/package-lock.json
+++ b/tools/scripts/build/package-lock.json
@@ -5594,9 +5594,9 @@
       "dev": true
     },
     "lodash": {
-      "version": "4.17.19",
-      "resolved": "https://registry.npmjs.org/lodash/-/lodash-4.17.19.tgz",
-      "integrity": "sha512-JNvd8XER9GQX0v2qJgsaN/mzFCNA5BRe/j8JN9d+tWyGLSodKQHKFicdwNYzWwI3wjRnaKPsGj1XkBjx/F96DQ==",
+      "version": "4.17.21",
+      "resolved": "https://registry.npmjs.org/lodash/-/lodash-4.17.21.tgz",
+      "integrity": "sha512-v2kDEe57lecTulaDIuNTPy3Ry4gLGJ6Z1O3vE1krgXZNrsQ+LFTGHVxVjcXPs17LhbZVGedAJv8XZ1tvj5FvSg==",
       "dev": true
     },
     "lru-cache": {