diff --git a/package.json b/package.json
index 6c6f9f9bc11..ae153d6cb42 100644
--- a/package.json
+++ b/package.json
@@ -246,7 +246,7 @@
     "is-hotkey": "0.1.6",
     "jquery": "3.5.1",
     "jsurl": "^0.1.5",
-    "lodash": "4.17.20",
+    "lodash": "4.17.21",
     "lru-cache": "^5.1.1",
     "md5": "^2.2.1",
     "memoize-one": "5.1.1",
diff --git a/packages/grafana-data/package.json b/packages/grafana-data/package.json
index c07512819af..2596589a47c 100644
--- a/packages/grafana-data/package.json
+++ b/packages/grafana-data/package.json
@@ -26,7 +26,7 @@
     "@types/d3-interpolate": "^1.3.1",
     "apache-arrow": "0.16.0",
     "eventemitter3": "4.0.7",
-    "lodash": "4.17.20",
+    "lodash": "4.17.21",
     "marked": "2.0.1",
     "rxjs": "6.6.3",
     "xss": "1.0.6"
diff --git a/packages/grafana-runtime/package.json b/packages/grafana-runtime/package.json
index ad74d7e4a4a..7c625bd7a30 100644
--- a/packages/grafana-runtime/package.json
+++ b/packages/grafana-runtime/package.json
@@ -34,7 +34,7 @@
     "@types/jest": "26.0.15",
     "@types/rollup-plugin-visualizer": "2.6.0",
     "@types/systemjs": "^0.20.6",
-    "lodash": "4.17.20",
+    "lodash": "4.17.21",
     "pretty-format": "25.1.0",
     "rollup": "2.33.3",
     "rollup-plugin-sourcemaps": "0.6.3",
diff --git a/packages/grafana-toolkit/package.json b/packages/grafana-toolkit/package.json
index b8969be3fdf..eb5835ad68b 100644
--- a/packages/grafana-toolkit/package.json
+++ b/packages/grafana-toolkit/package.json
@@ -79,7 +79,7 @@
     "jest-junit": "^6.4.0",
     "less": "^3.11.1",
     "less-loader": "^5.0.0",
-    "lodash": "4.17.20",
+    "lodash": "4.17.21",
     "md5-file": "^4.0.0",
     "mini-css-extract-plugin": "^0.7.0",
     "optimize-css-assets-webpack-plugin": "^5.0.3",
diff --git a/packages/grafana-ui/package.json b/packages/grafana-ui/package.json
index 19f3f88785a..5bf5c3c6ce4 100644
--- a/packages/grafana-ui/package.json
+++ b/packages/grafana-ui/package.json
@@ -54,7 +54,7 @@
     "hoist-non-react-statics": "3.3.2",
     "immutable": "3.8.2",
     "jquery": "3.5.1",
-    "lodash": "4.17.20",
+    "lodash": "4.17.21",
     "moment": "2.24.0",
     "monaco-editor": "0.20.0",
     "papaparse": "5.3.0",
diff --git a/packages/jaeger-ui-components/package.json b/packages/jaeger-ui-components/package.json
index 881de6fc01e..1bae230ee28 100644
--- a/packages/jaeger-ui-components/package.json
+++ b/packages/jaeger-ui-components/package.json
@@ -33,7 +33,7 @@
     "fuzzy": "^0.1.3",
     "hoist-non-react-statics": "^3.3.2",
     "json-markup": "^1.1.0",
-    "lodash": "4.17.20",
+    "lodash": "4.17.21",
     "lru-memoize": "^1.1.0",
     "memoize-one": "^5.0.0",
     "moment": "^2.18.1",
diff --git a/yarn.lock b/yarn.lock
index e2bcc57e415..b958b369107 100644
--- a/yarn.lock
+++ b/yarn.lock
@@ -17592,10 +17592,10 @@ lodash.uniq@4.5.0, lodash.uniq@^4.5.0:
   resolved "https://registry.yarnpkg.com/lodash.uniq/-/lodash.uniq-4.5.0.tgz#d0225373aeb652adc1bc82e4945339a842754773"
   integrity sha1-0CJTc662Uq3BvILklFM5qEJ1R3M=
 
-lodash@4.17.20, lodash@^4, lodash@^4.0.0, lodash@^4.0.1, lodash@^4.1.1, lodash@^4.15.0, lodash@^4.17.10, lodash@^4.17.11, lodash@^4.17.12, lodash@^4.17.13, lodash@^4.17.14, lodash@^4.17.15, lodash@^4.17.19, lodash@^4.17.20, lodash@^4.17.3, lodash@^4.17.4, lodash@^4.17.5, lodash@^4.2.1, lodash@^4.3.0, lodash@~4.17.10, lodash@~4.17.15:
-  version "4.17.20"
-  resolved "https://registry.yarnpkg.com/lodash/-/lodash-4.17.20.tgz#b44a9b6297bcb698f1c51a3545a2b3b368d59c52"
-  integrity sha512-PlhdFcillOINfeV7Ni6oF1TAEayyZBoZ8bcshTHqOYJYlrqzRK5hagpagky5o4HfCzzd1TRkXPMFq6cKk9rGmA==
+lodash@4.17.21, lodash@^4, lodash@^4.0.0, lodash@^4.0.1, lodash@^4.1.1, lodash@^4.15.0, lodash@^4.17.10, lodash@^4.17.11, lodash@^4.17.12, lodash@^4.17.13, lodash@^4.17.14, lodash@^4.17.15, lodash@^4.17.19, lodash@^4.17.20, lodash@^4.17.3, lodash@^4.17.4, lodash@^4.17.5, lodash@^4.2.1, lodash@^4.3.0, lodash@~4.17.10, lodash@~4.17.15:
+  version "4.17.21"
+  resolved "https://registry.yarnpkg.com/lodash/-/lodash-4.17.21.tgz#679591c564c3bffaae8454cf0b3df370c3d6911c"
+  integrity sha512-v2kDEe57lecTulaDIuNTPy3Ry4gLGJ6Z1O3vE1krgXZNrsQ+LFTGHVxVjcXPs17LhbZVGedAJv8XZ1tvj5FvSg==
 
 log-symbols@2.2.0, log-symbols@^2.1.0, log-symbols@^2.2.0:
   version "2.2.0"