diff --git a/src/userprofile/package-lock.json b/src/userprofile/package-lock.json
index edeadcef..6ef91a29 100644
--- a/src/userprofile/package-lock.json
+++ b/src/userprofile/package-lock.json
@@ -1950,9 +1950,9 @@
             }
         },
         "lodash": {
-            "version": "4.17.15",
-            "resolved": "https://registry.npmjs.org/lodash/-/lodash-4.17.15.tgz",
-            "integrity": "sha512-8xOcRHvCjnocdS5cpwXQXVzmmh5e5+saE2QGoeQmbKmRS6J3VQppPOIt0MnmE+4xlZoumy0GPG0D0MVIQbNA1A=="
+            "version": "4.17.19",
+            "resolved": "https://registry.npmjs.org/lodash/-/lodash-4.17.19.tgz",
+            "integrity": "sha512-JNvd8XER9GQX0v2qJgsaN/mzFCNA5BRe/j8JN9d+tWyGLSodKQHKFicdwNYzWwI3wjRnaKPsGj1XkBjx/F96DQ=="
         },
         "lodash.flattendeep": {
             "version": "4.4.0",
diff --git a/src/userprofile/package.json b/src/userprofile/package.json
index 0cd7f469..65730de3 100644
--- a/src/userprofile/package.json
+++ b/src/userprofile/package.json
@@ -17,7 +17,7 @@
         "express-prom-bundle": "^5.1.5",
         "express4-tedious": "^0.3.0",
         "extend": "^3.0.2",
-        "lodash": "^4.17.15",
+        "lodash": "^4.17.19",
         "morgan": "^1.9.1",
         "prom-client": "^11.5.3",
         "swagger-ui-express": "^4.0.6",