diff --git a/tests/testlargedbreactvuln/package-lock.json b/tests/testlargedbreactvuln/package-lock.json
index 02136ce..5bbfebf 100644
--- a/tests/testlargedbreactvuln/package-lock.json
+++ b/tests/testlargedbreactvuln/package-lock.json
@@ -84,9 +84,9 @@
       "integrity": "sha512-SWPw3rD6/ocA0JnGePoXp5Zf5eILzsoL5vdWdLwtTuyrElyCpfQb0whIcxMdK/gAKNl2rFDGkPAbwI2KGZCvNA=="
     },
     "lodash": {
-      "version": "3.3.0",
-      "resolved": "https://registry.npmjs.org/lodash/-/lodash-3.3.0.tgz",
-      "integrity": "sha1-ARzlLQGxTmDq7qdqy5uLpCxwWBs="
+      "version": "4.17.21",
+      "resolved": "https://registry.npmjs.org/lodash/-/lodash-4.17.21.tgz",
+      "integrity": "sha512-v2kDEe57lecTulaDIuNTPy3Ry4gLGJ6Z1O3vE1krgXZNrsQ+LFTGHVxVjcXPs17LhbZVGedAJv8XZ1tvj5FvSg=="
     },
     "memory-pager": {
       "version": "1.5.0",
diff --git a/tests/testlargedbreactvuln/package.json b/tests/testlargedbreactvuln/package.json
index a8109ac..1845edc 100644
--- a/tests/testlargedbreactvuln/package.json
+++ b/tests/testlargedbreactvuln/package.json
@@ -6,7 +6,7 @@
   "license": "MIT",
   "dependencies": {
     "react": "0.5.0",
-    "lodash": "3.3.0",
+    "lodash": "4.17.21",
     "easy-cookie-manager": "^1.0.2",
     "date.js": "^0.3.3",
     "agenda": "^2.1.0",