diff --git a/packages/klinklang-server/package.json b/packages/klinklang-server/package.json
index f6e4f9c..c4d2a8c 100644
--- a/packages/klinklang-server/package.json
+++ b/packages/klinklang-server/package.json
@@ -51,7 +51,7 @@
     "jsonpath-plus": "^10.3.0",
     "jsonwebtoken": "^9.0.3",
     "kafkajs": "^2.2.4",
-    "lodash-es": "^4.17.23",
+    "lodash-es": "^4.18.1",
     "masto": "^7.10.1",
     "oauth-1.0a": "^2.2.6",
     "pg": "^8.16.3",
diff --git a/pnpm-lock.yaml b/pnpm-lock.yaml
index 930015e..45eb426 100644
--- a/pnpm-lock.yaml
+++ b/pnpm-lock.yaml
@@ -209,8 +209,8 @@ importers:
         specifier: ^2.2.4
         version: 2.2.4
       lodash-es:
-        specifier: ^4.17.23
-        version: 4.17.23
+        specifier: ^4.18.1
+        version: 4.18.1
       masto:
         specifier: ^7.10.1
         version: 7.10.1
@@ -2786,8 +2786,8 @@ packages:
     resolution: {integrity: sha512-iPZK6eYjbxRu3uB4/WZ3EsEIMJFMqAoopl3R+zuq0UjcAm/MO6KCweDgPfP3elTztoKP3KtnVHxTn2NHBSDVUw==}
     engines: {node: '>=10'}
 
-  lodash-es@4.17.23:
-    resolution: {integrity: sha512-kVI48u3PZr38HdYz98UmfPnXl2DXrpdctLrFLCd3kOx1xUkOmpFPx7gCWWM5MPkL/fD8zb+Ph0QzjGFs4+hHWg==}
+  lodash-es@4.18.1:
+    resolution: {integrity: sha512-J8xewKD/Gk22OZbhpOVSwcs60zhd95ESDwezOFuA3/099925PdHJ7OFHNTGtajL3AlZkykD32HykiMo+BIBI8A==}
 
   lodash.clonedeep@4.5.0:
     resolution: {integrity: sha512-H5ZhCF25riFd9uB5UCkVKo61m3S/xZk1x4wA6yp/L3RFP6Z/eHH1ymQcGLo7J3GMPfm0V/7m1tryHuGVxpqEBQ==}
@@ -6612,7 +6612,7 @@ snapshots:
     dependencies:
       p-locate: 5.0.0
 
-  lodash-es@4.17.23: {}
+  lodash-es@4.18.1: {}
 
   lodash.clonedeep@4.5.0: {}