diff --git a/generators/package.json b/generators/package.json
index 51b0c11a3..360397b14 100644
--- a/generators/package.json
+++ b/generators/package.json
@@ -20,7 +20,7 @@
     "@babel/runtime": "7.28.4",
     "@babel/runtime-corejs3": "7.28.4",
     "@manypkg/find-root": "3.1.0",
-    "lodash": "4.17.23",
+    "lodash": "4.18.1",
     "prompts": "2.4.2",
     "squirrelly": "9.1.0",
     "tsx": "4.21.0"
diff --git a/pnpm-lock.yaml b/pnpm-lock.yaml
index 98cff4809..ce30b4859 100644
--- a/pnpm-lock.yaml
+++ b/pnpm-lock.yaml
@@ -138,8 +138,8 @@ importers:
         specifier: 3.1.0
         version: 3.1.0
       lodash:
-        specifier: 4.17.23
-        version: 4.17.23
+        specifier: 4.18.1
+        version: 4.18.1
       prompts:
         specifier: 2.4.2
         version: 2.4.2
@@ -184,8 +184,8 @@ importers:
         specifier: ^4.17.0
         version: 4.17.21
       lodash:
-        specifier: ^4.17.21
-        version: 4.17.23
+        specifier: ^4.18.1
+        version: 4.18.1
       omit-deep:
         specifier: ^0.3.0
         version: 0.3.0
@@ -6385,6 +6385,9 @@ packages:
   lodash@4.17.23:
     resolution: {integrity: sha512-LgVTMpQtIopCi79SJeDiP0TfWi5CNEc/L/aRdTh3yIvmZXTnheWpKjSZhnvMl8iXbC1tFg9gdHHDMLoV7CnG+w==}
 
+  lodash@4.18.1:
+    resolution: {integrity: sha512-dMInicTPVE8d1e5otfwmmjlxkZoUpiVLwyeTdUsi/Caj/gfzzblBcCE5sRHV/AsjuCmxWrte2TNGSYuCeCq+0Q==}
+
   log-symbols@4.1.0:
     resolution: {integrity: sha512-8XPvpAA8uyhfteu8pIvQxpJZ7SYYdpUivZpGy6sFsBuKRY/7rQGavedeB8aK+Zkyq6upMFVL/9AW6vOYzfRyLg==}
     engines: {node: '>=10'}
@@ -11566,7 +11569,7 @@ snapshots:
       https-proxy-agent: 7.0.6
       jose: 5.10.0
       js-yaml: 4.1.1
-      lodash: 4.17.23
+      lodash: 4.18.1
       scuid: 1.1.0
       tslib: 2.8.1
       yaml-ast-parser: 0.0.43
@@ -13639,7 +13642,7 @@ snapshots:
       '@babel/helper-module-imports': 7.28.6
       '@babel/types': 7.29.0
       glob: 7.2.3
-      lodash: 4.17.23
+      lodash: 4.18.1
       require-package-name: 2.0.1
     transitivePeerDependencies:
       - supports-color
@@ -15582,7 +15585,7 @@ snapshots:
     dependencies:
       '@types/html-minifier-terser': 6.1.0
       html-minifier-terser: 6.1.0
-      lodash: 4.17.23
+      lodash: 4.18.1
       pretty-error: 4.0.0
       tapable: 2.3.0
     optionalDependencies:
@@ -15739,7 +15742,7 @@ snapshots:
       cli-cursor: 3.1.0
       cli-width: 3.0.0
       figures: 3.2.0
-      lodash: 4.17.23
+      lodash: 4.18.1
       mute-stream: 0.0.8
       ora: 5.4.1
       run-async: 2.4.1
@@ -16779,6 +16782,8 @@ snapshots:
 
   lodash@4.17.23: {}
 
+  lodash@4.18.1: {}
+
   log-symbols@4.1.0:
     dependencies:
       chalk: 4.1.2
@@ -17578,7 +17583,7 @@ snapshots:
 
   pretty-error@4.0.0:
     dependencies:
-      lodash: 4.17.23
+      lodash: 4.18.1
       renderkid: 3.0.0
 
   pretty-format@27.5.1:
@@ -17916,7 +17921,7 @@ snapshots:
       css-select: 4.3.0
       dom-converter: 0.2.0
       htmlparser2: 6.1.0
-      lodash: 4.17.23
+      lodash: 4.18.1
       strip-ansi: 6.0.1
 
   require-directory@2.1.1: {}
diff --git a/standalone/package.json b/standalone/package.json
index cf9c63880..9ad277100 100644
--- a/standalone/package.json
+++ b/standalone/package.json
@@ -138,7 +138,7 @@
     "@commercetools/platform-sdk": "8.18.0",
     "@faker-js/faker": "^10.0.0",
     "@types/lodash": "^4.17.0",
-    "lodash": "^4.17.21",
+    "lodash": "^4.18.1",
     "omit-deep": "^0.3.0"
   }
 }