diff --git a/packages/extension/package.json b/packages/extension/package.json
index 08fec784e..19a23ba8a 100644
--- a/packages/extension/package.json
+++ b/packages/extension/package.json
@@ -69,7 +69,7 @@
     "ethereumjs-abi": "^0.6.8",
     "eventemitter3": "^5.0.1",
     "jdenticon": "^3.3.0",
-    "lodash": "^4.17.21",
+    "lodash": "^4.17.23",
     "memoize-one": "^6.0.0",
     "moment": "^2.30.1",
     "nanoevents": "^9.1.0",
diff --git a/packages/swap/package.json b/packages/swap/package.json
index 32b2541af..e5dafc667 100644
--- a/packages/swap/package.json
+++ b/packages/swap/package.json
@@ -30,7 +30,7 @@
     "eventemitter3": "^5.0.1",
     "isomorphic-ws": "^5.0.0",
     "json-rpc-2.0": "^1.7.0",
-    "lodash": "^4.17.21",
+    "lodash": "^4.17.23",
     "rango-sdk-basic": "^0.1.69",
     "reconnecting-websocket": "^4.4.0",
     "uuid": "^11.1.0",
diff --git a/yarn.lock b/yarn.lock
index 03c17e3a2..8dbfab54c 100644
--- a/yarn.lock
+++ b/yarn.lock
@@ -1672,7 +1672,7 @@ __metadata:
     jsdom: "npm:^26.1.0"
     less: "npm:^4.3.0"
     less-loader: "npm:^12.3.0"
-    lodash: "npm:^4.17.21"
+    lodash: "npm:^4.17.23"
     memoize-one: "npm:^6.0.0"
     moment: "npm:^2.30.1"
     nanoevents: "npm:^9.1.0"
@@ -2050,7 +2050,7 @@ __metadata:
     eventemitter3: "npm:^5.0.1"
     isomorphic-ws: "npm:^5.0.0"
     json-rpc-2.0: "npm:^1.7.0"
-    lodash: "npm:^4.17.21"
+    lodash: "npm:^4.17.23"
     prettier: "npm:^3.5.3"
     rango-sdk-basic: "npm:^0.1.69"
     reconnecting-websocket: "npm:^4.4.0"
@@ -22638,6 +22638,13 @@ __metadata:
   languageName: node
   linkType: hard
 
+"lodash@npm:^4.17.23":
+  version: 4.17.23
+  resolution: "lodash@npm:4.17.23"
+  checksum: 10/82504c88250f58da7a5a4289f57a4f759c44946c005dd232821c7688b5fcfbf4a6268f6a6cdde4b792c91edd2f3b5398c1d2a0998274432cff76def48735e233
+  languageName: node
+  linkType: hard
+
 "log-symbols@npm:^4.1.0":
   version: 4.1.0
   resolution: "log-symbols@npm:4.1.0"