diff --git a/packages/cssstats/package.json b/packages/cssstats/package.json
index ac02447..ce7e472 100644
--- a/packages/cssstats/package.json
+++ b/packages/cssstats/package.json
@@ -26,7 +26,7 @@
     "is-css-shorthand": "^1.0.1",
     "is-present": "^1.0.0",
     "is-vendor-prefixed": "^4.0.0",
-    "lodash": "^4.17.20",
+    "lodash": "^4.18.1",
     "postcss": "^8.1.4",
     "postcss-custom-properties": "^12.1.6",
     "postcss-safe-parser": "^5.0.2",
diff --git a/yarn.lock b/yarn.lock
index e9be670..8ced785 100644
--- a/yarn.lock
+++ b/yarn.lock
@@ -10795,6 +10795,11 @@ lodash@^4.17.10, lodash@^4.17.11, lodash@^4.17.12, lodash@^4.17.13, lodash@^4.17
   resolved "https://registry.npmjs.org/lodash/-/lodash-4.17.20.tgz"
   integrity sha512-PlhdFcillOINfeV7Ni6oF1TAEayyZBoZ8bcshTHqOYJYlrqzRK5hagpagky5o4HfCzzd1TRkXPMFq6cKk9rGmA==
 
+lodash@^4.18.1:
+  version "4.18.1"
+  resolved "https://registry.yarnpkg.com/lodash/-/lodash-4.18.1.tgz#ff2b66c1f6326d59513de2407bf881439812771c"
+  integrity sha512-dMInicTPVE8d1e5otfwmmjlxkZoUpiVLwyeTdUsi/Caj/gfzzblBcCE5sRHV/AsjuCmxWrte2TNGSYuCeCq+0Q==
+
 log-symbols@^4.0.0:
   version "4.0.0"
   resolved "https://registry.npmjs.org/log-symbols/-/log-symbols-4.0.0.tgz"