diff --git a/package-lock.json b/package-lock.json
index 7128ec2f..7847c508 100644
--- a/package-lock.json
+++ b/package-lock.json
@@ -13891,7 +13891,7 @@
         "chalk": "^4.1.2",
         "inflected": "^2.1.0",
         "jsonschema": "^1.5.0",
-        "lodash": "^4.17.23",
+        "lodash": "^4.18.1",
         "loglevel": "^1.9.2",
         "loglevel-plugin-prefix": "0.8.4",
         "minimatch": "^10.2.3",
@@ -13922,6 +13922,12 @@
         "node": "20 || >=22"
       }
     },
+    "packages/ruleset/node_modules/lodash": {
+      "version": "4.18.1",
+      "resolved": "https://registry.npmjs.org/lodash/-/lodash-4.18.1.tgz",
+      "integrity": "sha512-dMInicTPVE8d1e5otfwmmjlxkZoUpiVLwyeTdUsi/Caj/gfzzblBcCE5sRHV/AsjuCmxWrte2TNGSYuCeCq+0Q==",
+      "license": "MIT"
+    },
     "packages/ruleset/node_modules/minimatch": {
       "version": "10.2.4",
       "license": "BlueOak-1.0.0",
@@ -13967,7 +13973,7 @@
         "globby": "^11.0.4",
         "js-yaml": "^4.1.1",
         "json-dup-key-validator": "^1.0.3",
-        "lodash": "^4.17.23",
+        "lodash": "^4.18.1",
         "nimma": "^0.7.0",
         "pad": "^2.3.0",
         "semver": "^7.6.0"
@@ -14010,6 +14016,12 @@
     "packages/validator/node_modules/json-schema-traverse": {
       "version": "1.0.0",
       "license": "MIT"
+    },
+    "packages/validator/node_modules/lodash": {
+      "version": "4.18.1",
+      "resolved": "https://registry.npmjs.org/lodash/-/lodash-4.18.1.tgz",
+      "integrity": "sha512-dMInicTPVE8d1e5otfwmmjlxkZoUpiVLwyeTdUsi/Caj/gfzzblBcCE5sRHV/AsjuCmxWrte2TNGSYuCeCq+0Q==",
+      "license": "MIT"
     }
   }
 }
diff --git a/packages/ruleset/package.json b/packages/ruleset/package.json
index 36f2918c..f232bd15 100644
--- a/packages/ruleset/package.json
+++ b/packages/ruleset/package.json
@@ -28,7 +28,7 @@
     "chalk": "^4.1.2",
     "inflected": "^2.1.0",
     "jsonschema": "^1.5.0",
-    "lodash": "^4.17.23",
+    "lodash": "^4.18.1",
     "loglevel": "^1.9.2",
     "loglevel-plugin-prefix": "0.8.4",
     "minimatch": "^10.2.3",
diff --git a/packages/validator/package.json b/packages/validator/package.json
index 379ce723..5f6de610 100644
--- a/packages/validator/package.json
+++ b/packages/validator/package.json
@@ -37,7 +37,7 @@
     "globby": "^11.0.4",
     "js-yaml": "^4.1.1",
     "json-dup-key-validator": "^1.0.3",
-    "lodash": "^4.17.23",
+    "lodash": "^4.18.1",
     "nimma": "^0.7.0",
     "pad": "^2.3.0",
     "semver": "^7.6.0"