diff --git a/package.json b/package.json
index 9ac907c..d9b1355 100644
--- a/package.json
+++ b/package.json
@@ -55,7 +55,7 @@
     "@observablehq/runtime": "4",
     "babel-plugin-transform-react-pure-class-to-function": "1.0.1",
     "babel-plugin-transform-react-remove-prop-types": "0.4.24",
-    "lodash": "4.17.11",
+    "lodash": "4.17.19",
     "prop-types": "15.7.2",
     "react": "16.8.6",
     "react-dom": "16.8.6",