diff --git a/client/package.json b/client/package.json
index 205df4af390..5e7fd61ca10 100644
--- a/client/package.json
+++ b/client/package.json
@@ -86,8 +86,8 @@
     "gatsby-transformer-remark": "6.16.0",
     "i18next": "25.10.10",
     "instantsearch.js": "4.94.0",
-    "lodash": "4.17.21",
-    "lodash-es": "4.17.21",
+    "lodash": "4.18.1",
+    "lodash-es": "4.18.1",
     "micromark": "4.0.2",
     "monaco-editor": "0.52.2",
     "nanoid": "3.3.11",
diff --git a/curriculum/package.json b/curriculum/package.json
index 1a1dbc4ae4d..fe276eb2d7e 100644
--- a/curriculum/package.json
+++ b/curriculum/package.json
@@ -73,7 +73,7 @@
     "joi-objectid": "3.0.1",
     "js-yaml": "4.0.0",
     "jsdom": "16.7.0",
-    "lodash": "4.17.21",
+    "lodash": "4.18.1",
     "mocha": "10.8.2",
     "mock-require": "3.0.3",
     "ora": "5.4.1",
diff --git a/package.json b/package.json
index cc524d1df77..78579f2013e 100644
--- a/package.json
+++ b/package.json
@@ -90,7 +90,7 @@
     "identity-obj-proxy": "^3.0.0",
     "js-yaml": "3.14.2",
     "lint-staged": "^16.4.0",
-    "lodash": "4.17.21",
+    "lodash": "4.18.1",
     "npm-run-all2": "5.0.2",
     "prettier": "3.8.2",
     "stylelint": "16.26.1",
diff --git a/packages/challenge-builder/package.json b/packages/challenge-builder/package.json
index fe522228b90..b4aa94adc0e 100644
--- a/packages/challenge-builder/package.json
+++ b/packages/challenge-builder/package.json
@@ -46,6 +46,6 @@
     "@freecodecamp/browser-scripts": "workspace:*",
     "@freecodecamp/loop-protect": "3.0.0",
     "@freecodecamp/shared": "workspace:*",
-    "lodash-es": "4.17.23"
+    "lodash-es": "4.18.1"
   }
 }
diff --git a/pnpm-lock.yaml b/pnpm-lock.yaml
index 1fedce894e5..abe9c97d281 100644
--- a/pnpm-lock.yaml
+++ b/pnpm-lock.yaml
@@ -60,8 +60,8 @@ importers:
         specifier: ^16.4.0
         version: 16.4.0
       lodash:
-        specifier: 4.17.21
-        version: 4.17.21
+        specifier: 4.18.1
+        version: 4.18.1
       npm-run-all2:
         specifier: 5.0.2
         version: 5.0.2
@@ -391,11 +391,11 @@ importers:
         specifier: 4.94.0
         version: 4.94.0(algoliasearch@4.27.0)
       lodash:
-        specifier: 4.17.21
-        version: 4.17.21
+        specifier: 4.18.1
+        version: 4.18.1
       lodash-es:
-        specifier: 4.17.21
-        version: 4.17.21
+        specifier: 4.18.1
+        version: 4.18.1
       micromark:
         specifier: 4.0.2
         version: 4.0.2
@@ -744,8 +744,8 @@ importers:
         specifier: 16.7.0
         version: 16.7.0
       lodash:
-        specifier: 4.17.21
-        version: 4.17.21
+        specifier: 4.18.1
+        version: 4.18.1
       mocha:
         specifier: 10.8.2
         version: 10.8.2
@@ -807,8 +807,8 @@ importers:
         specifier: workspace:*
         version: link:../shared
       lodash-es:
-        specifier: 4.17.23
-        version: 4.17.23
+        specifier: 4.18.1
+        version: 4.18.1
     devDependencies:
       '@freecodecamp/eslint-config':
         specifier: workspace:*
@@ -995,8 +995,8 @@ importers:
         specifier: 3.14.2
         version: 3.14.2
       lodash:
-        specifier: 4.17.21
-        version: 4.17.21
+        specifier: 4.18.1
+        version: 4.18.1
       mdast-builder:
         specifier: 1.1.1
         version: 1.1.1
@@ -8980,12 +8980,6 @@ packages:
   lock@1.1.0:
     resolution: {integrity: sha512-NZQIJJL5Rb9lMJ0Yl1JoVr9GSdo4HTPsUEWsSFzB8dE8DSoiLCVavWZPi7Rnlv/o73u6I24S/XYc/NmG4l8EKA==}
 
-  lodash-es@4.17.21:
-    resolution: {integrity: sha512-mKnC+QJ9pWVzv+C4/U3rRsHapFfHvQFoFB92e52xeyGMcX6/OlIl78je1u8vePzYZSkkogMPJ2yjxxsb89cxyw==}
-
-  lodash-es@4.17.23:
-    resolution: {integrity: sha512-kVI48u3PZr38HdYz98UmfPnXl2DXrpdctLrFLCd3kOx1xUkOmpFPx7gCWWM5MPkL/fD8zb+Ph0QzjGFs4+hHWg==}
-
   lodash-es@4.18.1:
     resolution: {integrity: sha512-J8xewKD/Gk22OZbhpOVSwcs60zhd95ESDwezOFuA3/099925PdHJ7OFHNTGtajL3AlZkykD32HykiMo+BIBI8A==}
 
@@ -23750,10 +23744,6 @@ snapshots:
 
   lock@1.1.0: {}
 
-  lodash-es@4.17.21: {}
-
-  lodash-es@4.17.23: {}
-
   lodash-es@4.18.1: {}
 
   lodash.clonedeep@4.5.0: {}
diff --git a/tools/challenge-parser/package.json b/tools/challenge-parser/package.json
index 47be8b94a41..445db4f47ae 100644
--- a/tools/challenge-parser/package.json
+++ b/tools/challenge-parser/package.json
@@ -28,7 +28,7 @@
   "dependencies": {
     "hast-util-to-html": "7.1.3",
     "js-yaml": "3.14.2",
-    "lodash": "4.17.21",
+    "lodash": "4.18.1",
     "mdast-builder": "1.1.1",
     "mdast-util-directive": "1.0.1",
     "mdast-util-gfm-strikethrough": "0.2.3",