diff --git a/packages/desktop-client/package.json b/packages/desktop-client/package.json
index 2a92afb99c..31213c6aca 100644
--- a/packages/desktop-client/package.json
+++ b/packages/desktop-client/package.json
@@ -57,7 +57,7 @@
     "i18next-parser": "^9.3.0",
     "i18next-resources-to-backend": "^1.2.1",
     "jsdom": "^27.4.0",
-    "lodash": "^4.17.21",
+    "lodash": "^4.17.23",
     "loot-core": "workspace:*",
     "mdast-util-newline-to-break": "^2.0.0",
     "memoize-one": "^6.0.0",
diff --git a/yarn.lock b/yarn.lock
index dfd928f52a..7e343b6de9 100644
--- a/yarn.lock
+++ b/yarn.lock
@@ -173,7 +173,7 @@ __metadata:
     i18next-parser: "npm:^9.3.0"
     i18next-resources-to-backend: "npm:^1.2.1"
     jsdom: "npm:^27.4.0"
-    lodash: "npm:^4.17.21"
+    lodash: "npm:^4.17.23"
     loot-core: "workspace:*"
     mdast-util-newline-to-break: "npm:^2.0.0"
     memoize-one: "npm:^6.0.0"
@@ -18562,6 +18562,13 @@ __metadata:
   languageName: node
   linkType: hard
 
+"lodash@npm:^4.17.23":
+  version: 4.17.23
+  resolution: "lodash@npm:4.17.23"
+  checksum: 10/82504c88250f58da7a5a4289f57a4f759c44946c005dd232821c7688b5fcfbf4a6268f6a6cdde4b792c91edd2f3b5398c1d2a0998274432cff76def48735e233
+  languageName: node
+  linkType: hard
+
 "log-symbols@npm:^4.1.0":
   version: 4.1.0
   resolution: "log-symbols@npm:4.1.0"