diff --git a/package.json b/package.json
index 5dde6c2d7d..9a31837499 100644
--- a/package.json
+++ b/package.json
@@ -60,7 +60,7 @@
     "global": "^4.3.2",
     "html-webpack-plugin": "^3.2.0",
     "inquirer": "^6.4.1",
-    "lodash.merge": "^4.6.0",
+    "lodash.merge": "^4.6.2",
     "lodash.template": "^4.5.0",
     "log-symbols": "^3.0.0",
     "mime-types": "^2.1.24",
diff --git a/packages/api/core/package.json b/packages/api/core/package.json
index d620826bd0..dac74ca0c3 100644
--- a/packages/api/core/package.json
+++ b/packages/api/core/package.json
@@ -47,7 +47,7 @@
     "find-up": "^4.1.0",
     "fs-extra": "^8.1.0",
     "glob": "^7.1.4",
-    "lodash.merge": "^4.6.0",
+    "lodash.merge": "^4.6.2",
     "lodash.template": "^4.5.0",
     "log-symbols": "^3.0.0",
     "node-fetch": "^2.6.0",
@@ -62,4 +62,4 @@
   "engines": {
     "node": ">= 8.0"
   }
-}
\ No newline at end of file
+}
diff --git a/packages/publisher/github/package.json b/packages/publisher/github/package.json
index 8bace233dd..0c08af4d3f 100644
--- a/packages/publisher/github/package.json
+++ b/packages/publisher/github/package.json
@@ -22,7 +22,7 @@
     "@electron-forge/shared-types": "6.0.0-beta.39",
     "@octokit/rest": "^16.28.3",
     "fs-extra": "^8.1.0",
-    "lodash.merge": "^4.6.0",
+    "lodash.merge": "^4.6.2",
     "mime-types": "^2.1.24"
   }
 }
\ No newline at end of file
diff --git a/yarn.lock b/yarn.lock
index 07e7e719fa..fd3994ed16 100644
--- a/yarn.lock
+++ b/yarn.lock
@@ -5468,10 +5468,10 @@ lodash.map@^4.5.1:
   resolved "https://registry.yarnpkg.com/lodash.map/-/lodash.map-4.6.0.tgz#771ec7839e3473d9c4cde28b19394c3562f4f6d3"
   integrity sha1-dx7Hg540c9nEzeKLGTlMNWL09tM=
 
-lodash.merge@^4.6.0, lodash.merge@^4.6.1:
-  version "4.6.1"
-  resolved "https://registry.yarnpkg.com/lodash.merge/-/lodash.merge-4.6.1.tgz#adc25d9cb99b9391c59624f379fbba60d7111d54"
-  integrity sha512-AOYza4+Hf5z1/0Hztxpm2/xiPZgi/cjMqdnKTUWTBSKchJlxXXuUSxCCl8rJlf4g6yww/j6mA8nC8Hw/EZWxKQ==
+lodash.merge@^4.6.0, lodash.merge@^4.6.1, lodash.merge@^4.6.2:
+  version "4.6.2"
+  resolved "https://registry.yarnpkg.com/lodash.merge/-/lodash.merge-4.6.2.tgz#558aa53b43b661e1925a0afdfa36a9a1085fe57a"
+  integrity sha512-0KpjqXRVvrYyCsX1swR/XTK0va6VQkQM6MNo7PqW77ByjAhoARA8EfrP1N4+KlKj8YS0ZUCtRT/YUuhyYDujIQ==
 
 lodash.pull@^4.1.0:
   version "4.1.0"