diff --git a/package-lock.json b/package-lock.json
index 5131b5f4d23..f1d179be19e 100644
--- a/package-lock.json
+++ b/package-lock.json
@@ -1,6 +1,6 @@
 {
   "name": "prebid.js",
-  "version": "4.15.0-pre",
+  "version": "4.39.0-pre",
   "lockfileVersion": 1,
   "requires": true,
   "dependencies": {
@@ -15771,9 +15771,9 @@
       }
     },
     "lodash": {
-      "version": "4.17.19",
-      "resolved": "https://registry.npmjs.org/lodash/-/lodash-4.17.19.tgz",
-      "integrity": "sha512-JNvd8XER9GQX0v2qJgsaN/mzFCNA5BRe/j8JN9d+tWyGLSodKQHKFicdwNYzWwI3wjRnaKPsGj1XkBjx/F96DQ==",
+      "version": "4.17.21",
+      "resolved": "https://registry.npmjs.org/lodash/-/lodash-4.17.21.tgz",
+      "integrity": "sha512-v2kDEe57lecTulaDIuNTPy3Ry4gLGJ6Z1O3vE1krgXZNrsQ+LFTGHVxVjcXPs17LhbZVGedAJv8XZ1tvj5FvSg==",
       "dev": true
     },
     "lodash._basecopy": {
@@ -24613,4 +24613,4 @@
       }
     }
   }
-}
\ No newline at end of file
+}
diff --git a/package.json b/package.json
index bc3c3534cc9..a04743eab39 100644
--- a/package.json
+++ b/package.json
@@ -86,7 +86,7 @@
     "karma-sourcemap-loader": "^0.3.7",
     "karma-spec-reporter": "^0.0.31",
     "karma-webpack": "^3.0.5",
-    "lodash": "^4.17.4",
+    "lodash": "^4.17.21",
     "mocha": "^5.0.0",
     "morgan": "^1.10.0",
     "opn": "^5.4.0",