diff --git a/src/main/polymer/base/package-lock.json b/src/main/polymer/base/package-lock.json
index 5e1ec6b..2176164 100644
--- a/src/main/polymer/base/package-lock.json
+++ b/src/main/polymer/base/package-lock.json
@@ -853,9 +853,9 @@
       "integrity": "sha512-oeWlpLmBW3gFl7979Wol2LKITpmKTUFNn7PnFbh6YNynF61W74l6x5WhwItAwPRSATpexaX1egNnRzlN4GOtfQ=="
     },
     "lodash": {
-      "version": "4.17.15",
-      "resolved": "https://registry.npmjs.org/lodash/-/lodash-4.17.15.tgz",
-      "integrity": "sha512-8xOcRHvCjnocdS5cpwXQXVzmmh5e5+saE2QGoeQmbKmRS6J3VQppPOIt0MnmE+4xlZoumy0GPG0D0MVIQbNA1A==",
+      "version": "4.17.19",
+      "resolved": "https://registry.npmjs.org/lodash/-/lodash-4.17.19.tgz",
+      "integrity": "sha512-JNvd8XER9GQX0v2qJgsaN/mzFCNA5BRe/j8JN9d+tWyGLSodKQHKFicdwNYzWwI3wjRnaKPsGj1XkBjx/F96DQ==",
       "dev": true
     },
     "lodash._baseassign": {
diff --git a/src/main/polymer/base/package.json b/src/main/polymer/base/package.json
index a3d5989..ae93a21 100644
--- a/src/main/polymer/base/package.json
+++ b/src/main/polymer/base/package.json
@@ -28,7 +28,7 @@
     "@webcomponents/webcomponentsjs": "^2.4.3",
     "wct-browser-legacy": "^1.0.2",
     "growl": ">=1.10.0",
-    "lodash": ">=4.17.12",
+    "lodash": ">=4.17.19",
     "diff": ">=3.5.0",
     "minimist": ">=0.2.1",
     "debug": ">=2.6.9"