diff --git a/NOTICE-js b/NOTICE-js
index 3781ae82..691022c6 100644
--- a/NOTICE-js
+++ b/NOTICE-js
@@ -20854,7 +20854,7 @@ SOFTWARE.
------
-** lodash; version 4.17.15 -- https://lodash.com/
+** lodash; version 4.17.19 -- https://lodash.com/
Copyright OpenJS Foundation and other contributors
Copyright Jeremy Ashkenas, DocumentCloud and Investigative Reporters & Editors
copyright Jeremy Ashkenas, DocumentCloud and Investigative Reporters & Editors
diff --git a/package.json b/package.json
index 18ff4185..898437de 100644
--- a/package.json
+++ b/package.json
@@ -121,7 +121,7 @@
"immutable": "3.7.5",
"jquery": "1.11.1",
"jquery.cookie": "1.4.1",
- "lodash": "^4.17.15",
+ "lodash": "^4.17.19",
"marked": "^0.7.0",
"mobx": "^4.3.1",
"mobx-react": "^5.4.3",
diff --git a/yarn.lock b/yarn.lock
index e48df48d..a17fae56 100644
--- a/yarn.lock
+++ b/yarn.lock
@@ -10257,12 +10257,12 @@ lodash.uniq@^4.5.0:
resolved "https://registry.yarnpkg.com/lodash.uniq/-/lodash.uniq-4.5.0.tgz#d0225373aeb652adc1bc82e4945339a842754773"
integrity sha1-0CJTc662Uq3BvILklFM5qEJ1R3M=
-lodash@^4.0.0, lodash@^4.15.0, lodash@^4.16.2, lodash@^4.17.11, lodash@^4.17.12, lodash@^4.17.13, lodash@^4.17.14, lodash@^4.17.15, lodash@^4.17.4, lodash@^4.17.5, lodash@~4.17.12:
+lodash@^4.0.0, lodash@^4.15.0, lodash@^4.16.2, lodash@^4.17.11, lodash@^4.17.12, lodash@^4.17.13, lodash@^4.17.14, lodash@^4.17.4, lodash@^4.17.5, lodash@~4.17.12:
version "4.17.15"
resolved "https://registry.yarnpkg.com/lodash/-/lodash-4.17.15.tgz#b447f6670a0455bbfeedd11392eff330ea097548"
integrity sha512-8xOcRHvCjnocdS5cpwXQXVzmmh5e5+saE2QGoeQmbKmRS6J3VQppPOIt0MnmE+4xlZoumy0GPG0D0MVIQbNA1A==
-lodash@^4.0.1:
+lodash@^4.0.1, lodash@^4.17.15, lodash@^4.17.19:
version "4.17.19"
resolved "https://registry.yarnpkg.com/lodash/-/lodash-4.17.19.tgz#e48ddedbe30b3321783c5b4301fbd353bc1e4a4b"
integrity sha512-JNvd8XER9GQX0v2qJgsaN/mzFCNA5BRe/j8JN9d+tWyGLSodKQHKFicdwNYzWwI3wjRnaKPsGj1XkBjx/F96DQ==