diff --git a/packages/theme-check-common/package.json b/packages/theme-check-common/package.json
index cdd90bbaf..c0e4c8ec7 100644
--- a/packages/theme-check-common/package.json
+++ b/packages/theme-check-common/package.json
@@ -30,7 +30,7 @@
     "cross-fetch": "^4.0.0",
     "jsonc-parser": "^3.2.0",
     "line-column": "^1.0.2",
-    "lodash": "^4.17.23",
+    "lodash": "^4.18.1",
     "minimatch": "^10.2.1",
     "vscode-json-languageservice": "^5.3.10",
     "vscode-uri": "^3.0.7"
diff --git a/yarn.lock b/yarn.lock
index a419a0840..2bb10d8e5 100644
--- a/yarn.lock
+++ b/yarn.lock
@@ -5443,10 +5443,10 @@ lodash.truncate@^4.4.2:
   resolved "https://registry.yarnpkg.com/lodash.truncate/-/lodash.truncate-4.4.2.tgz#5a350da0b1113b837ecfffd5812cbe58d6eae193"
   integrity sha512-jttmRe7bRse52OsWIMDLaXxWqRAmtIUccAQ3garviCqJjafXOfNMO0yMfNpdD6zbGaTU0P5Nz7e7gAT6cKmJRw==
 
-lodash@^4.17.20, lodash@^4.17.21, lodash@^4.17.23:
-  version "4.17.23"
-  resolved "https://registry.yarnpkg.com/lodash/-/lodash-4.17.23.tgz#f113b0378386103be4f6893388c73d0bde7f2c5a"
-  integrity sha512-LgVTMpQtIopCi79SJeDiP0TfWi5CNEc/L/aRdTh3yIvmZXTnheWpKjSZhnvMl8iXbC1tFg9gdHHDMLoV7CnG+w==
+lodash@^4.17.20, lodash@^4.17.21, lodash@^4.18.1:
+  version "4.18.1"
+  resolved "https://registry.yarnpkg.com/lodash/-/lodash-4.18.1.tgz#ff2b66c1f6326d59513de2407bf881439812771c"
+  integrity sha512-dMInicTPVE8d1e5otfwmmjlxkZoUpiVLwyeTdUsi/Caj/gfzzblBcCE5sRHV/AsjuCmxWrte2TNGSYuCeCq+0Q==
 
 log-symbols@^4.1.0:
   version "4.1.0"