diff --git a/package.json b/package.json
index 9c3ff670..10ee8a55 100644
--- a/package.json
+++ b/package.json
@@ -48,7 +48,7 @@
     "i18n": "0.15.3",
     "is-svg": "4.4.0",
     "jsdom-nogyp": "0.8.3",
-    "lodash": "4.17.21",
+    "lodash": "4.17.23",
     "lutim": "1.0.3",
     "lz-string": "git+https://github.com/hackmdio/lz-string.git#commit=6edfccb79cd8c210f03fd3bf18e41ca144fbeefb",
     "mariadb": "3.4.5",
diff --git a/yarn.lock b/yarn.lock
index f6d1eb57..e6b423a5 100644
--- a/yarn.lock
+++ b/yarn.lock
@@ -1500,7 +1500,7 @@ __metadata:
     less: "npm:4.5.1"
     less-loader: "npm:7.3.0"
     list.js: "npm:2.3.1"
-    lodash: "npm:4.17.21"
+    lodash: "npm:4.17.23"
     lutim: "npm:1.0.3"
     lz-string: "git+https://github.com/hackmdio/lz-string.git#commit=6edfccb79cd8c210f03fd3bf18e41ca144fbeefb"
     mariadb: "npm:3.4.5"
@@ -9662,7 +9662,14 @@ __metadata:
   languageName: node
   linkType: hard
 
-"lodash@npm:4.17.21, lodash@npm:4.17.x, lodash@npm:^4.17.15, lodash@npm:^4.17.20, lodash@npm:^4.17.21, lodash@npm:^4.17.4, lodash@npm:^4.17.5":
+"lodash@npm:4.17.23":
+  version: 4.17.23
+  resolution: "lodash@npm:4.17.23"
+  checksum: 10/82504c88250f58da7a5a4289f57a4f759c44946c005dd232821c7688b5fcfbf4a6268f6a6cdde4b792c91edd2f3b5398c1d2a0998274432cff76def48735e233
+  languageName: node
+  linkType: hard
+
+"lodash@npm:4.17.x, lodash@npm:^4.17.15, lodash@npm:^4.17.20, lodash@npm:^4.17.21, lodash@npm:^4.17.4, lodash@npm:^4.17.5":
   version: 4.17.21
   resolution: "lodash@npm:4.17.21"
   checksum: 10/c08619c038846ea6ac754abd6dd29d2568aa705feb69339e836dfa8d8b09abbb2f859371e86863eda41848221f9af43714491467b5b0299122431e202bb0c532