diff --git a/data/package.json b/data/package.json
index a795a3b..fd6e9c8 100644
--- a/data/package.json
+++ b/data/package.json
@@ -5,7 +5,7 @@
   "license": "MIT",
   "dependencies": {
     "chai": "^4.1.0",
-    "lodash": "^4.17.4",
+    "lodash": "^4.17.19",
     "mocha": "^3.4.2"
   },
   "scripts": {
diff --git a/data/yarn.lock b/data/yarn.lock
index 57c32b6..883d82c 100644
--- a/data/yarn.lock
+++ b/data/yarn.lock
@@ -159,9 +159,9 @@ lodash.keys@^3.0.0:
     lodash.isarguments "^3.0.0"
     lodash.isarray "^3.0.0"
 
-lodash@^4.17.4:
-  version "4.17.4"
-  resolved "https://registry.yarnpkg.com/lodash/-/lodash-4.17.4.tgz#78203a4d1c328ae1d86dca6460e369b57f4055ae"
+lodash@^4.17.19:
+  version "4.17.19"
+  resolved "https://registry.yarnpkg.com/lodash/-/lodash-4.17.19.tgz#e48ddedbe30b3321783c5b4301fbd353bc1e4a4b"
 
 minimatch@^3.0.2:
   version "3.0.4"