diff --git a/package-lock.json b/package-lock.json
index 6e6ba01..0b94229 100644
--- a/package-lock.json
+++ b/package-lock.json
@@ -1,6 +1,6 @@
 {
   "name": "apostrophe-preferences",
-  "version": "0.5.20",
+  "version": "0.5.23",
   "lockfileVersion": 1,
   "requires": true,
   "dependencies": {
@@ -20,9 +20,9 @@
       }
     },
     "lodash": {
-      "version": "2.4.1",
-      "resolved": "https://registry.npmjs.org/lodash/-/lodash-2.4.1.tgz",
-      "integrity": "sha1-W3cjA03aTSYuWkb7LFjXzCL3FCA="
+      "version": "4.17.13",
+      "resolved": "https://registry.npmjs.org/lodash/-/lodash-4.17.13.tgz",
+      "integrity": "sha512-vm3/XWXfWtRua0FkUyEHBZy8kCPjErNBT9fJx8Zvs+U6zjqPbTUOpkaoum3O5uiA8sm+yNMHXfYkTUHFoMxFNA=="
     }
   }
 }
diff --git a/package.json b/package.json
index b4fa22d..485194c 100644
--- a/package.json
+++ b/package.json
@@ -14,7 +14,7 @@
   "license": "BSD",
   "dependencies": {
     "async": "^2.5.0",
-    "lodash": "2.4.1"
+    "lodash": "4.17.13"
   },
   "bugs": {
     "url": "https://github.com/apostrophecms-legacy/apostrophe-preferences/issues"