diff --git a/services/document-updater/package-lock.json b/services/document-updater/package-lock.json
index 964ffbc4d2..d1a9986887 100644
--- a/services/document-updater/package-lock.json
+++ b/services/document-updater/package-lock.json
@@ -1511,9 +1511,9 @@
       "integrity": "sha1-SjGI1CkbZrT2XtuZ+AaqmuKTWSo="
     },
     "lodash": {
-      "version": "4.17.4",
-      "resolved": "https://registry.npmjs.org/lodash/-/lodash-4.17.4.tgz",
-      "integrity": "sha1-eCA6TRwyiuHYbcpkYONptX9AVa4="
+      "version": "4.17.13",
+      "resolved": "https://registry.npmjs.org/lodash/-/lodash-4.17.13.tgz",
+      "integrity": "sha512-vm3/XWXfWtRua0FkUyEHBZy8kCPjErNBT9fJx8Zvs+U6zjqPbTUOpkaoum3O5uiA8sm+yNMHXfYkTUHFoMxFNA=="
     },
     "lodash.defaults": {
       "version": "4.2.0",
diff --git a/services/document-updater/package.json b/services/document-updater/package.json
index f80251248b..eea5c9d88b 100644
--- a/services/document-updater/package.json
+++ b/services/document-updater/package.json
@@ -23,7 +23,7 @@
     "async": "^2.5.0",
     "coffee-script": "~1.7.0",
     "express": "3.11.0",
-    "lodash": "^4.17.4",
+    "lodash": "^4.17.13",
     "logger-sharelatex": "^1.7.0",
     "lynx": "0.0.11",
     "metrics-sharelatex": "^2.2.0",