diff --git a/package.json b/package.json
index 3dadc6c..de9b2af 100644
--- a/package.json
+++ b/package.json
@@ -22,7 +22,7 @@
     "esm": "^3.0.84",
     "fs-extra": "^7.0.0",
     "human-size": "^1.1.0",
-    "lodash-es": "^4.17.11",
+    "lodash-es": "^4.17.21",
     "ora": "^3.0.0",
     "s3": "^4.4.0",
     "semver": "^5.6.0"
diff --git a/yarn.lock b/yarn.lock
index 06a6292..e42b4c1 100644
--- a/yarn.lock
+++ b/yarn.lock
@@ -226,10 +226,10 @@ load-script@^1.0.0:
   resolved "https://registry.yarnpkg.com/load-script/-/load-script-1.0.0.tgz#0491939e0bee5643ee494a7e3da3d2bac70c6ca4"
   integrity sha1-BJGTngvuVkPuSUp+PaPSuscMbKQ=
 
-lodash-es@^4.17.11:
-  version "4.17.11"
-  resolved "https://registry.yarnpkg.com/lodash-es/-/lodash-es-4.17.11.tgz#145ab4a7ac5c5e52a3531fb4f310255a152b4be0"
-  integrity sha512-DHb1ub+rMjjrxqlB3H56/6MXtm1lSksDp2rA2cNWjG8mlDUYFhUj3Di2Zn5IwSU87xLv8tNIQ7sSwE/YOX/D/Q==
+lodash-es@^4.17.21:
+  version "4.17.21"
+  resolved "https://registry.yarnpkg.com/lodash-es/-/lodash-es-4.17.21.tgz#43e626c46e6591b7750beb2b50117390c609e3ee"
+  integrity sha512-mKnC+QJ9pWVzv+C4/U3rRsHapFfHvQFoFB92e52xeyGMcX6/OlIl78je1u8vePzYZSkkogMPJ2yjxxsb89cxyw==
 
 log-symbols@^2.2.0:
   version "2.2.0"