diff --git a/package.json b/package.json
index 8c266c1289..edf313fa9b 100644
--- a/package.json
+++ b/package.json
@@ -31,7 +31,7 @@
     "hbs": "^4.0.4",
     "humanize-ms": "1.0.1",
     "jquery": "^2.2.4",
-    "lodash": "4.17.4",
+    "lodash": "4.17.17",
     "marked": "0.3.5",
     "method-override": "latest",
     "moment": "2.15.1",
@@ -42,7 +42,7 @@
     "mysql": "^2.18.1",
     "npmconf": "0.0.24",
     "optional": "^0.1.3",
-    "sanitize-html": "^1.4.2",
+    "sanitize-html": "^1.7.1",
     "sequelize": "5.22.5",
     "st": "0.2.4",
     "stream-buffers": "^3.0.1",