diff --git a/package-lock.json b/package-lock.json
index e1d806c17b..528b32c2b7 100644
--- a/package-lock.json
+++ b/package-lock.json
@@ -13881,9 +13881,9 @@
 			}
 		},
 		"lodash": {
-			"version": "4.17.19",
-			"resolved": "https://registry.npmjs.org/lodash/-/lodash-4.17.19.tgz",
-			"integrity": "sha512-JNvd8XER9GQX0v2qJgsaN/mzFCNA5BRe/j8JN9d+tWyGLSodKQHKFicdwNYzWwI3wjRnaKPsGj1XkBjx/F96DQ=="
+			"version": "4.17.20",
+			"resolved": "https://registry.npmjs.org/lodash/-/lodash-4.17.20.tgz",
+			"integrity": "sha512-PlhdFcillOINfeV7Ni6oF1TAEayyZBoZ8bcshTHqOYJYlrqzRK5hagpagky5o4HfCzzd1TRkXPMFq6cKk9rGmA=="
 		},
 		"lodash.defaultsdeep": {
 			"version": "4.6.1",
diff --git a/package.json b/package.json
index d303dc8d2a..c3eee909e5 100644
--- a/package.json
+++ b/package.json
@@ -33,7 +33,7 @@
 		"emoji-regex": "^9.0.0",
 		"escape-html": "^1.0.3",
 		"hark": "^1.2.3",
-		"lodash": "^4.17.19",
+		"lodash": "^4.17.20",
 		"mockconsole": "0.0.1",
 		"nextcloud-vue-collections": "^0.7.2",
 		"sdp-transform": "^2.14.0",