diff --git a/csaf-validator-lib/package-lock.json b/csaf-validator-lib/package-lock.json
index eaf21c980..6a0d1de5a 100644
--- a/csaf-validator-lib/package-lock.json
+++ b/csaf-validator-lib/package-lock.json
@@ -16,7 +16,7 @@
         "bcp47": "^1.1.2",
         "cvss2js": "^1.1.0",
         "json-pointer": "^0.6.1",
-        "lodash": "^4.17.21",
+        "lodash": "^4.18.1",
         "packageurl-js": "^2.0.1",
         "semver": "^7.5.4",
         "temporal-polyfill": "^0.3.0",
@@ -922,9 +922,9 @@
       }
     },
     "node_modules/lodash": {
-      "version": "4.17.23",
-      "resolved": "https://registry.npmjs.org/lodash/-/lodash-4.17.23.tgz",
-      "integrity": "sha512-LgVTMpQtIopCi79SJeDiP0TfWi5CNEc/L/aRdTh3yIvmZXTnheWpKjSZhnvMl8iXbC1tFg9gdHHDMLoV7CnG+w==",
+      "version": "4.18.1",
+      "resolved": "https://registry.npmjs.org/lodash/-/lodash-4.18.1.tgz",
+      "integrity": "sha512-dMInicTPVE8d1e5otfwmmjlxkZoUpiVLwyeTdUsi/Caj/gfzzblBcCE5sRHV/AsjuCmxWrte2TNGSYuCeCq+0Q==",
       "license": "MIT"
     },
     "node_modules/log-symbols": {
diff --git a/csaf-validator-lib/package.json b/csaf-validator-lib/package.json
index 321b85a4e..39e684074 100644
--- a/csaf-validator-lib/package.json
+++ b/csaf-validator-lib/package.json
@@ -30,7 +30,7 @@
     "bcp47": "^1.1.2",
     "cvss2js": "^1.1.0",
     "json-pointer": "^0.6.1",
-    "lodash": "^4.17.21",
+    "lodash": "^4.18.1",
     "packageurl-js": "^2.0.1",
     "semver": "^7.5.4",
     "temporal-polyfill": "^0.3.0",