diff --git a/tests/testlodashvuln/package-lock.json b/tests/testlodashvuln/package-lock.json
index 4b3b5b8..0e9c6e8 100644
--- a/tests/testlodashvuln/package-lock.json
+++ b/tests/testlodashvuln/package-lock.json
@@ -74,9 +74,9 @@
       "integrity": "sha512-SWPw3rD6/ocA0JnGePoXp5Zf5eILzsoL5vdWdLwtTuyrElyCpfQb0whIcxMdK/gAKNl2rFDGkPAbwI2KGZCvNA=="
     },
     "lodash": {
-      "version": "3.3.0",
-      "resolved": "https://registry.npmjs.org/lodash/-/lodash-3.3.0.tgz",
-      "integrity": "sha1-ARzlLQGxTmDq7qdqy5uLpCxwWBs="
+      "version": "4.17.21",
+      "resolved": "https://registry.npmjs.org/lodash/-/lodash-4.17.21.tgz",
+      "integrity": "sha512-v2kDEe57lecTulaDIuNTPy3Ry4gLGJ6Z1O3vE1krgXZNrsQ+LFTGHVxVjcXPs17LhbZVGedAJv8XZ1tvj5FvSg=="
     },
     "memory-pager": {
       "version": "1.5.0",
diff --git a/tests/testlodashvuln/package.json b/tests/testlodashvuln/package.json
index 10b3ff9..e1376d2 100644
--- a/tests/testlodashvuln/package.json
+++ b/tests/testlodashvuln/package.json
@@ -5,7 +5,7 @@
   "author": "",
   "license": "MIT",
   "dependencies": {
-    "lodash": "3.3.0",
+    "lodash": "4.17.21",
     "easy-cookie-manager": "^1.0.2",
     "date.js": "^0.3.3",
     "agenda": "^2.1.0",