diff --git a/package-lock.json b/package-lock.json
index 5a89e03..512a51c 100644
--- a/package-lock.json
+++ b/package-lock.json
@@ -4307,9 +4307,9 @@
       "integrity": "sha1-4j8/nE+Pvd6HJSnBBxhXoIblzO8="
     },
     "lodash.merge": {
-      "version": "4.6.1",
-      "resolved": "https://registry.npmjs.org/lodash.merge/-/lodash.merge-4.6.1.tgz",
-      "integrity": "sha512-AOYza4+Hf5z1/0Hztxpm2/xiPZgi/cjMqdnKTUWTBSKchJlxXXuUSxCCl8rJlf4g6yww/j6mA8nC8Hw/EZWxKQ=="
+      "version": "4.6.2",
+      "resolved": "https://registry.npmjs.org/lodash.merge/-/lodash.merge-4.6.2.tgz",
+      "integrity": "sha512-0KpjqXRVvrYyCsX1swR/XTK0va6VQkQM6MNo7PqW77ByjAhoARA8EfrP1N4+KlKj8YS0ZUCtRT/YUuhyYDujIQ=="
     },
     "loose-envify": {
       "version": "1.4.0",
diff --git a/package.json b/package.json
index e9e87e5..437635e 100644
--- a/package.json
+++ b/package.json
@@ -26,7 +26,7 @@
     "connect": "3.7.0",
     "get-port": "5.0.0",
     "http-proxy-middleware": "0.19.1",
-    "lodash.merge": "4.6.1",
+    "lodash.merge": "4.6.2",
     "memoize-one": "5.0.4",
     "next-aws-lambda": "2.0.5-alpha.0",
     "serverless-http": "2.0.1",