diff --git a/fixtures/packaging/systemjs-builder/dev/yarn.lock b/fixtures/packaging/systemjs-builder/dev/yarn.lock
index 9dd2fdb3736..810b7aceb5f 100644
--- a/fixtures/packaging/systemjs-builder/dev/yarn.lock
+++ b/fixtures/packaging/systemjs-builder/dev/yarn.lock
@@ -399,8 +399,8 @@ lazy-cache@^1.0.3:
   resolved "https://registry.yarnpkg.com/lazy-cache/-/lazy-cache-1.0.4.tgz#a1d78fc3a50474cb80845d3b3b6e1da49a446e8e"
 
 lodash@^4.17.4:
-  version "4.17.4"
-  resolved "https://registry.yarnpkg.com/lodash/-/lodash-4.17.4.tgz#78203a4d1c328ae1d86dca6460e369b57f4055ae"
+  version "4.17.23"
+  resolved "https://registry.yarnpkg.com/lodash/-/lodash-4.17.23.tgz#f113b0378386103be4f6893388c73d0bde7f2c5a"
 
 longest@^1.0.1:
   version "1.0.1"