diff --git a/cncjs-pendant-joystickreader/package-lock.json b/cncjs-pendant-joystickreader/package-lock.json
index 09a7c75..7ef7743 100644
--- a/cncjs-pendant-joystickreader/package-lock.json
+++ b/cncjs-pendant-joystickreader/package-lock.json
@@ -585,9 +585,9 @@
       }
     },
     "lodash": {
-      "version": "4.17.20",
-      "resolved": "https://registry.npmjs.org/lodash/-/lodash-4.17.20.tgz",
-      "integrity": "sha512-PlhdFcillOINfeV7Ni6oF1TAEayyZBoZ8bcshTHqOYJYlrqzRK5hagpagky5o4HfCzzd1TRkXPMFq6cKk9rGmA=="
+      "version": "4.17.21",
+      "resolved": "https://registry.npmjs.org/lodash/-/lodash-4.17.21.tgz",
+      "integrity": "sha512-v2kDEe57lecTulaDIuNTPy3Ry4gLGJ6Z1O3vE1krgXZNrsQ+LFTGHVxVjcXPs17LhbZVGedAJv8XZ1tvj5FvSg=="
     },
     "lodash.includes": {
       "version": "4.3.0",
diff --git a/cncjs-pendant-joystickreader/package.json b/cncjs-pendant-joystickreader/package.json
index 54e3d6e..cf0e8bf 100644
--- a/cncjs-pendant-joystickreader/package.json
+++ b/cncjs-pendant-joystickreader/package.json
@@ -31,7 +31,7 @@
     "commander": "^5.0.0-4",
     "inquirer": "^7.3.3",
     "jsonwebtoken": "^8.5.1",
-    "lodash": "^4.17.18",
+    "lodash": "^4.17.21",
     "node-hid": "^2.1.1",
     "serialport": "^8.0.7",
     "socket.io-client": "^2.3.0"