diff --git a/browser/package-lock.json b/browser/package-lock.json
index 448e7ac1..9057d17d 100644
--- a/browser/package-lock.json
+++ b/browser/package-lock.json
@@ -8,7 +8,7 @@
       "name": "hed-validator-web",
       "version": "1.0.0",
       "dependencies": {
-        "lodash": "^4.17.23",
+        "lodash": "^4.18.1",
         "react": "^18.2.0",
         "react-dom": "^18.2.0",
         "readable-stream": "^4.7.0",
@@ -2329,9 +2329,9 @@
       }
     },
     "node_modules/lodash": {
-      "version": "4.17.23",
-      "resolved": "https://registry.npmjs.org/lodash/-/lodash-4.17.23.tgz",
-      "integrity": "sha512-LgVTMpQtIopCi79SJeDiP0TfWi5CNEc/L/aRdTh3yIvmZXTnheWpKjSZhnvMl8iXbC1tFg9gdHHDMLoV7CnG+w==",
+      "version": "4.18.1",
+      "resolved": "https://registry.npmjs.org/lodash/-/lodash-4.18.1.tgz",
+      "integrity": "sha512-dMInicTPVE8d1e5otfwmmjlxkZoUpiVLwyeTdUsi/Caj/gfzzblBcCE5sRHV/AsjuCmxWrte2TNGSYuCeCq+0Q==",
       "license": "MIT"
     },
     "node_modules/loose-envify": {
diff --git a/browser/package.json b/browser/package.json
index 5f3c3f01..21681573 100644
--- a/browser/package.json
+++ b/browser/package.json
@@ -9,7 +9,7 @@
     "test": "vitest --run"
   },
   "dependencies": {
-    "lodash": "^4.17.23",
+    "lodash": "^4.18.1",
     "react": "^18.2.0",
     "react-dom": "^18.2.0",
     "readable-stream": "^4.7.0",
diff --git a/package-lock.json b/package-lock.json
index 9084b801..2baa140c 100644
--- a/package-lock.json
+++ b/package-lock.json
@@ -6350,9 +6350,9 @@
       }
     },
     "node_modules/lodash": {
-      "version": "4.17.23",
-      "resolved": "https://registry.npmjs.org/lodash/-/lodash-4.17.23.tgz",
-      "integrity": "sha512-LgVTMpQtIopCi79SJeDiP0TfWi5CNEc/L/aRdTh3yIvmZXTnheWpKjSZhnvMl8iXbC1tFg9gdHHDMLoV7CnG+w==",
+      "version": "4.18.1",
+      "resolved": "https://registry.npmjs.org/lodash/-/lodash-4.18.1.tgz",
+      "integrity": "sha512-dMInicTPVE8d1e5otfwmmjlxkZoUpiVLwyeTdUsi/Caj/gfzzblBcCE5sRHV/AsjuCmxWrte2TNGSYuCeCq+0Q==",
       "license": "MIT"
     },
     "node_modules/lodash.debounce": {