diff --git a/CHANGELOG.md b/CHANGELOG.md
index ffa1d3d9..59a0c5c2 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -14,6 +14,10 @@ and this project adheres to
 - ✨(summary) add routes v2 for async STT and summary tasks  #1171
 - ✅(backend) add unit tests for JwtTokenService #1232
 
+### Changed
+
+- ⬆️(backend) bump lodash from 4.17.23 to 4.18.1 in /src/mail
+
 ### Fixed
 
 - ⬆️(dependencies) update aiohttp to v3.13.4 [SECURITY]
diff --git a/src/mail/package-lock.json b/src/mail/package-lock.json
index 2396d806..16eb67bc 100644
--- a/src/mail/package-lock.json
+++ b/src/mail/package-lock.json
@@ -884,9 +884,9 @@
       }
     },
     "node_modules/lodash": {
-      "version": "4.17.23",
-      "resolved": "https://registry.npmjs.org/lodash/-/lodash-4.17.23.tgz",
-      "integrity": "sha512-LgVTMpQtIopCi79SJeDiP0TfWi5CNEc/L/aRdTh3yIvmZXTnheWpKjSZhnvMl8iXbC1tFg9gdHHDMLoV7CnG+w==",
+      "version": "4.18.1",
+      "resolved": "https://registry.npmjs.org/lodash/-/lodash-4.18.1.tgz",
+      "integrity": "sha512-dMInicTPVE8d1e5otfwmmjlxkZoUpiVLwyeTdUsi/Caj/gfzzblBcCE5sRHV/AsjuCmxWrte2TNGSYuCeCq+0Q==",
       "license": "MIT"
     },
     "node_modules/lower-case": {