diff --git a/package-lock.json b/package-lock.json
index 8acc9617..f46dab48 100644
--- a/package-lock.json
+++ b/package-lock.json
@@ -18,7 +18,7 @@
         "jju": "^1.4.0",
         "json-in-place": "^1.0.1",
         "jszip": "^3.10.1",
-        "lodash": "^4.17.21",
+        "lodash": "~4.17.23",
         "minimist": "^1.2.6",
         "mkdirp": "^1.0.4",
         "onecolor": "^2.5.0",
@@ -2624,9 +2624,9 @@
       }
     },
     "node_modules/lodash": {
-      "version": "4.17.21",
-      "resolved": "https://pkgs.dev.azure.com/mseng/PipelineTools/_packaging/PipelineTools_PublicPackages/npm/registry/lodash/-/lodash-4.17.21.tgz",
-      "integrity": "sha1-Z5WRxWTDv/quhFTPCz3zcMPWkRw=",
+      "version": "4.17.23",
+      "resolved": "https://pkgs.dev.azure.com/mseng/PipelineTools/_packaging/PipelineTools_PublicPackages/npm/registry/lodash/-/lodash-4.17.23.tgz",
+      "integrity": "sha1-8ROwN4OGEDvk9okziMc9C95/LFo=",
       "license": "MIT"
     },
     "node_modules/log-symbols": {
@@ -6176,9 +6176,9 @@
       }
     },
     "lodash": {
-      "version": "4.17.21",
-      "resolved": "https://pkgs.dev.azure.com/mseng/PipelineTools/_packaging/PipelineTools_PublicPackages/npm/registry/lodash/-/lodash-4.17.21.tgz",
-      "integrity": "sha1-Z5WRxWTDv/quhFTPCz3zcMPWkRw="
+      "version": "4.17.23",
+      "resolved": "https://pkgs.dev.azure.com/mseng/PipelineTools/_packaging/PipelineTools_PublicPackages/npm/registry/lodash/-/lodash-4.17.23.tgz",
+      "integrity": "sha1-8ROwN4OGEDvk9okziMc9C95/LFo="
     },
     "log-symbols": {
       "version": "4.1.0",
diff --git a/package.json b/package.json
index b2d5f412..ce8db282 100644
--- a/package.json
+++ b/package.json
@@ -50,7 +50,7 @@
     "jju": "^1.4.0",
     "json-in-place": "^1.0.1",
     "jszip": "^3.10.1",
-    "lodash": "^4.17.21",
+    "lodash": "~4.17.23",
     "minimist": "^1.2.6",
     "mkdirp": "^1.0.4",
     "onecolor": "^2.5.0",