diff --git a/packages/cli/package.json b/packages/cli/package.json
index 36c95a7..6c7ab6a 100644
--- a/packages/cli/package.json
+++ b/packages/cli/package.json
@@ -45,7 +45,7 @@
   "dependencies": {
     "@joystream/runtime-api": "^0.1.0",
     "chalk": "^2.4.2",
-    "lodash": "^4.17.11",
+    "lodash": "^4.17.19",
     "meow": "^5.0.0",
     "request": "^2.88.0"
   }
diff --git a/packages/colossus/package.json b/packages/colossus/package.json
index 5a8e3d4..0161196 100644
--- a/packages/colossus/package.json
+++ b/packages/colossus/package.json
@@ -59,7 +59,7 @@
     "express-openapi": "^4.6.1",
     "figlet": "^1.2.1",
     "js-yaml": "^3.13.1",
-    "lodash": "^4.17.11",
+    "lodash": "^4.17.19",
     "meow": "^5.0.0",
     "multer": "^1.4.1",
     "si-prefix": "^0.2.0"
diff --git a/packages/runtime-api/package.json b/packages/runtime-api/package.json
index abf9294..91c81aa 100644
--- a/packages/runtime-api/package.json
+++ b/packages/runtime-api/package.json
@@ -47,7 +47,7 @@
     "@joystream/types": "^0.10.0",
     "@polkadot/api": "^0.96.1",
     "async-lock": "^1.2.0",
-    "lodash": "^4.17.11",
+    "lodash": "^4.17.19",
     "password-prompt": "^1.1.2"
   }
 }
diff --git a/yarn.lock b/yarn.lock
index fcc061b..ac8560c 100644
--- a/yarn.lock
+++ b/yarn.lock
@@ -2784,10 +2784,10 @@ lodash.merge@^4.6.1:
   resolved "https://registry.yarnpkg.com/lodash.merge/-/lodash.merge-4.6.2.tgz#558aa53b43b661e1925a0afdfa36a9a1085fe57a"
   integrity sha512-0KpjqXRVvrYyCsX1swR/XTK0va6VQkQM6MNo7PqW77ByjAhoARA8EfrP1N4+KlKj8YS0ZUCtRT/YUuhyYDujIQ==
 
-lodash@^4.17.11, lodash@^4.17.12, lodash@^4.17.14, lodash@^4.17.15, lodash@^4.17.4:
-  version "4.17.15"
-  resolved "https://registry.yarnpkg.com/lodash/-/lodash-4.17.15.tgz#b447f6670a0455bbfeedd11392eff330ea097548"
-  integrity sha512-8xOcRHvCjnocdS5cpwXQXVzmmh5e5+saE2QGoeQmbKmRS6J3VQppPOIt0MnmE+4xlZoumy0GPG0D0MVIQbNA1A==
+lodash@^4.17.11, lodash@^4.17.12, lodash@^4.17.14, lodash@^4.17.15, lodash@^4.17.19, lodash@^4.17.4:
+  version "4.17.19"
+  resolved "https://registry.yarnpkg.com/lodash/-/lodash-4.17.19.tgz#e48ddedbe30b3321783c5b4301fbd353bc1e4a4b"
+  integrity sha512-JNvd8XER9GQX0v2qJgsaN/mzFCNA5BRe/j8JN9d+tWyGLSodKQHKFicdwNYzWwI3wjRnaKPsGj1XkBjx/F96DQ==
 
 lolex@^4.2.0:
   version "4.2.0"