diff --git a/package-lock.json b/package-lock.json
index 45552bcb9..d7bc198b9 100644
--- a/package-lock.json
+++ b/package-lock.json
@@ -7632,9 +7632,9 @@
             }
         },
         "node_modules/lodash": {
-            "version": "4.17.23",
-            "resolved": "https://registry.npmjs.org/lodash/-/lodash-4.17.23.tgz",
-            "integrity": "sha512-LgVTMpQtIopCi79SJeDiP0TfWi5CNEc/L/aRdTh3yIvmZXTnheWpKjSZhnvMl8iXbC1tFg9gdHHDMLoV7CnG+w==",
+            "version": "4.18.1",
+            "resolved": "https://registry.npmjs.org/lodash/-/lodash-4.18.1.tgz",
+            "integrity": "sha512-dMInicTPVE8d1e5otfwmmjlxkZoUpiVLwyeTdUsi/Caj/gfzzblBcCE5sRHV/AsjuCmxWrte2TNGSYuCeCq+0Q==",
             "license": "MIT"
         },
         "node_modules/lodash.camelcase": {
@@ -11356,7 +11356,7 @@
                 "@js-soft/docdb-access-loki": "^1.4.0",
                 "@nmshd/runtime": "*",
                 "eventsource": "^4.1.0",
-                "lodash": "^4.17.23"
+                "lodash": "^4.18.1"
             },
             "devDependencies": {
                 "@js-soft/node-logger": "^1.2.2",
@@ -11376,7 +11376,7 @@
                 "@nmshd/core-types": "*",
                 "@nmshd/iql": "^1.0.4",
                 "@nmshd/transport": "*",
-                "lodash": "^4.17.23",
+                "lodash": "^4.18.1",
                 "ts-simple-nameof": "^1.3.3"
             },
             "devDependencies": {
@@ -11438,7 +11438,7 @@
                 "ajv-errors": "^3.0.0",
                 "ajv-formats": "^3.0.1",
                 "json-stringify-safe": "^5.0.1",
-                "lodash": "^4.17.23",
+                "lodash": "^4.18.1",
                 "luxon": "^3.7.2",
                 "reflect-metadata": "^0.2.2",
                 "ts-simple-nameof": "^1.3.3"
@@ -11503,7 +11503,7 @@
                 "fast-json-patch": "^3.1.1",
                 "form-data": "^4.0.5",
                 "json-stringify-safe": "^5.0.1",
-                "lodash": "^4.17.23",
+                "lodash": "^4.18.1",
                 "luxon": "^3.7.2",
                 "qs": "^6.15.0",
                 "reflect-metadata": "^0.2.2",
diff --git a/packages/app-runtime/package.json b/packages/app-runtime/package.json
index 91a5840b6..9593108db 100644
--- a/packages/app-runtime/package.json
+++ b/packages/app-runtime/package.json
@@ -55,7 +55,7 @@
         "@js-soft/docdb-access-loki": "^1.4.0",
         "@nmshd/runtime": "*",
         "eventsource": "^4.1.0",
-        "lodash": "^4.17.23"
+        "lodash": "^4.18.1"
     },
     "devDependencies": {
         "@js-soft/node-logger": "^1.2.2",
diff --git a/packages/consumption/package.json b/packages/consumption/package.json
index 66d88d0d1..1c2ea62b9 100644
--- a/packages/consumption/package.json
+++ b/packages/consumption/package.json
@@ -66,7 +66,7 @@
         "@nmshd/core-types": "*",
         "@nmshd/iql": "^1.0.4",
         "@nmshd/transport": "*",
-        "lodash": "^4.17.23",
+        "lodash": "^4.18.1",
         "ts-simple-nameof": "^1.3.3"
     },
     "devDependencies": {
diff --git a/packages/runtime/package.json b/packages/runtime/package.json
index 0f74a5246..7f88cd948 100644
--- a/packages/runtime/package.json
+++ b/packages/runtime/package.json
@@ -76,7 +76,7 @@
         "ajv-errors": "^3.0.0",
         "ajv-formats": "^3.0.1",
         "json-stringify-safe": "^5.0.1",
-        "lodash": "^4.17.23",
+        "lodash": "^4.18.1",
         "luxon": "^3.7.2",
         "reflect-metadata": "^0.2.2",
         "ts-simple-nameof": "^1.3.3"
diff --git a/packages/transport/package.json b/packages/transport/package.json
index 0d9604768..43303c388 100644
--- a/packages/transport/package.json
+++ b/packages/transport/package.json
@@ -75,7 +75,7 @@
         "fast-json-patch": "^3.1.1",
         "form-data": "^4.0.5",
         "json-stringify-safe": "^5.0.1",
-        "lodash": "^4.17.23",
+        "lodash": "^4.18.1",
         "luxon": "^3.7.2",
         "qs": "^6.15.0",
         "reflect-metadata": "^0.2.2",