diff --git a/packages/theme-check-common/package.json b/packages/theme-check-common/package.json
index 2a3700e27..b9a0ab1ec 100644
--- a/packages/theme-check-common/package.json
+++ b/packages/theme-check-common/package.json
@@ -30,7 +30,7 @@
     "cross-fetch": "^4.0.0",
     "jsonc-parser": "^3.2.0",
     "line-column": "^1.0.2",
-    "lodash": "^4.17.21",
+    "lodash": "^4.17.23",
     "minimatch": "^9.0.1",
     "vscode-json-languageservice": "^5.3.10",
     "vscode-uri": "^3.0.7"
diff --git a/yarn.lock b/yarn.lock
index d4128e08f..e8ac83ef3 100644
--- a/yarn.lock
+++ b/yarn.lock
@@ -5220,10 +5220,10 @@ lodash.truncate@^4.4.2:
   resolved "https://registry.yarnpkg.com/lodash.truncate/-/lodash.truncate-4.4.2.tgz#5a350da0b1113b837ecfffd5812cbe58d6eae193"
   integrity sha512-jttmRe7bRse52OsWIMDLaXxWqRAmtIUccAQ3garviCqJjafXOfNMO0yMfNpdD6zbGaTU0P5Nz7e7gAT6cKmJRw==
 
-lodash@^4.17.20, lodash@^4.17.21:
-  version "4.17.21"
-  resolved "https://registry.yarnpkg.com/lodash/-/lodash-4.17.21.tgz#679591c564c3bffaae8454cf0b3df370c3d6911c"
-  integrity sha512-v2kDEe57lecTulaDIuNTPy3Ry4gLGJ6Z1O3vE1krgXZNrsQ+LFTGHVxVjcXPs17LhbZVGedAJv8XZ1tvj5FvSg==
+lodash@^4.17.20, lodash@^4.17.21, lodash@^4.17.23:
+  version "4.17.23"
+  resolved "https://registry.yarnpkg.com/lodash/-/lodash-4.17.23.tgz#f113b0378386103be4f6893388c73d0bde7f2c5a"
+  integrity sha512-LgVTMpQtIopCi79SJeDiP0TfWi5CNEc/L/aRdTh3yIvmZXTnheWpKjSZhnvMl8iXbC1tFg9gdHHDMLoV7CnG+w==
 
 loupe@^2.3.6:
   version "2.3.7"