diff --git a/digdag-ui/package-lock.json b/digdag-ui/package-lock.json
index e3b7a6df3c..9339ab9168 100644
--- a/digdag-ui/package-lock.json
+++ b/digdag-ui/package-lock.json
@@ -7331,9 +7331,9 @@
       }
     },
     "lodash": {
-      "version": "4.17.13",
-      "resolved": "https://registry.npmjs.org/lodash/-/lodash-4.17.13.tgz",
-      "integrity": "sha512-vm3/XWXfWtRua0FkUyEHBZy8kCPjErNBT9fJx8Zvs+U6zjqPbTUOpkaoum3O5uiA8sm+yNMHXfYkTUHFoMxFNA=="
+      "version": "4.17.21",
+      "resolved": "https://registry.npmjs.org/lodash/-/lodash-4.17.21.tgz",
+      "integrity": "sha512-v2kDEe57lecTulaDIuNTPy3Ry4gLGJ6Z1O3vE1krgXZNrsQ+LFTGHVxVjcXPs17LhbZVGedAJv8XZ1tvj5FvSg=="
     },
     "lodash._baseassign": {
       "version": "3.2.0",
diff --git a/digdag-ui/package.json b/digdag-ui/package.json
index 8e683c1e12..18f0ea0f62 100644
--- a/digdag-ui/package.json
+++ b/digdag-ui/package.json
@@ -29,7 +29,7 @@
     "jquery": "3.4.0",
     "js-untar": "0.1.4",
     "js-yaml": "3.13.1",
-    "lodash": "^4.17.13",
+    "lodash": "^4.17.21",
     "lru-cache": "4.0.2",
     "macaddress": "0.2.9",
     "moment": "^2.22.1",