diff --git a/package-lock.json b/package-lock.json
index 27c3d024..1e7dad4a 100644
--- a/package-lock.json
+++ b/package-lock.json
@@ -16,7 +16,7 @@
         "@modelcontextprotocol/sdk": "^1.10.2",
         "@supabase/supabase-js": "^2.49.4",
         "axios": "0.30.2",
-        "lodash": "4.17.15",
+        "lodash": "4.17.21",
         "yaml": "^2.3.1"
       },
       "devDependencies": {
@@ -46,7 +46,7 @@
         "@types/marked": "^5.0.2",
         "@types/node-cron": "^3.0.11",
         "array-flatten": "^1.1.1",
-        "axios": "^1.13.2",
+        "axios": "^1.10.0",
         "chalk": "^4.1.2",
         "compression": "^1.7.4",
         "cors": "^2.8.5",
@@ -57,6 +57,7 @@
         "helmet": "^7.1.0",
         "ioredis": "^5.6.1",
         "js-yaml": "^4.1.0",
+        "lodash": "^4.17.21",
         "lru-cache": "^7.18.3",
         "marked": "^16.2.0",
         "morgan": "^1.10.0",
@@ -739,8 +740,8 @@
         "@supabase/auth-helpers-react": "^0.4.2",
         "@supabase/supabase-js": "^2.50.0",
         "@types/marked": "^5.0.2",
-        "axios": "^0.30.2",
         "ioredis": "^5.6.1",
+        "lodash": "^4.17.21",
         "marked": "^16.2.0",
         "next": "^14.2.30",
         "node-fetch": "^2.7.0",
@@ -13082,9 +13083,9 @@
       }
     },
     "node_modules/lodash": {
-      "version": "4.17.15",
-      "resolved": "https://registry.npmjs.org/lodash/-/lodash-4.17.15.tgz",
-      "integrity": "sha512-8xOcRHvCjnocdS5cpwXQXVzmmh5e5+saE2QGoeQmbKmRS6J3VQppPOIt0MnmE+4xlZoumy0GPG0D0MVIQbNA1A==",
+      "version": "4.17.21",
+      "resolved": "https://registry.npmjs.org/lodash/-/lodash-4.17.21.tgz",
+      "integrity": "sha512-v2kDEe57lecTulaDIuNTPy3Ry4gLGJ6Z1O3vE1krgXZNrsQ+LFTGHVxVjcXPs17LhbZVGedAJv8XZ1tvj5FvSg==",
       "license": "MIT"
     },
     "node_modules/lodash-es": {
@@ -19467,7 +19468,7 @@
         "@anthropic-ai/sdk": "^0.32.1",
         "@google/generative-ai": "^0.21.0",
         "@supabase/supabase-js": "^2.57.4",
-        "axios": "^1.13.2",
+        "axios": "^1.6.0",
         "cron": "^3.1.7",
         "dotenv": "^16.3.1",
         "glob": "^7.1.7",
@@ -19483,7 +19484,7 @@
         "@types/jsonwebtoken": "^9.0.10",
         "@types/node": "^20.0.0",
         "@types/xml2js": "^0.4.14",
-        "lodash": "^4.17.19",
+        "lodash": "^4.17.21",
         "typescript": "^5.0.0"
       }
     },
@@ -19498,13 +19499,6 @@
         "proxy-from-env": "^1.1.0"
       }
     },
-    "packages/agents/node_modules/lodash": {
-      "version": "4.17.21",
-      "resolved": "https://registry.npmjs.org/lodash/-/lodash-4.17.21.tgz",
-      "integrity": "sha512-v2kDEe57lecTulaDIuNTPy3Ry4gLGJ6Z1O3vE1krgXZNrsQ+LFTGHVxVjcXPs17LhbZVGedAJv8XZ1tvj5FvSg==",
-      "dev": true,
-      "license": "MIT"
-    },
     "packages/agents/node_modules/node-cron": {
       "version": "3.0.3",
       "license": "ISC",
@@ -19531,10 +19525,11 @@
         "@supabase/supabase-js": "^2.50.0",
         "@types/marked": "^5.0.2",
         "@types/node-cron": "^3.0.11",
-        "axios": "^1.13.2",
+        "axios": "^1.10.0",
         "dotenv": "^16.5.0",
         "express": "^4.21.1",
         "ioredis": "^5.6.1",
+        "lodash": "^4.17.21",
         "marked": "^16.2.0",
         "node-cron": "^4.1.0",
         "node-fetch": "^2.7.0",
@@ -20005,9 +20000,10 @@
         "@supabase/supabase-js": "^2.50.0",
         "@types/marked": "^5.0.2",
         "@types/node-cron": "^3.0.11",
-        "axios": "^1.13.2",
+        "axios": "^1.10.0",
         "dotenv": "^16.5.0",
         "ioredis": "^5.6.1",
+        "lodash": "^4.17.21",
         "marked": "^16.2.0",
         "node-cron": "^4.1.0",
         "node-fetch": "^2.7.0",
@@ -20121,7 +20117,7 @@
         "@codequal/core": "file:../core",
         "@eslint/mcp": "^0.1.0",
         "@types/marked": "^5.0.2",
-        "axios": "^1.13.2",
+        "axios": "^1.10.0",
         "better-npm-audit": "^3.7.0",
         "eslint-plugin-security": "^3.0.0",
         "eslint-plugin-sonarjs": "^0.25.0",
@@ -20129,6 +20125,7 @@
         "jscpd": "^4.0.5",
         "license-checker": "^25.0.1",
         "lighthouse": "^12.8.2",
+        "lodash": "^4.17.21",
         "madge": "^7.0.0",
         "marked": "^16.2.0",
         "node-fetch": "^2.7.0",
@@ -20172,9 +20169,10 @@
         "@supabase/supabase-js": "^2.50.0",
         "@types/marked": "^5.0.2",
         "@types/node-cron": "^3.0.11",
-        "axios": "^1.13.2",
+        "axios": "^1.10.0",
         "dotenv": "^16.5.0",
         "ioredis": "^5.6.1",
+        "lodash": "^4.17.21",
         "marked": "^16.2.0",
         "node-cron": "^4.1.0",
         "node-fetch": "^2.7.0",
@@ -20485,9 +20483,10 @@
         "@supabase/supabase-js": "^2.50.0",
         "@types/marked": "^5.0.2",
         "@types/node-cron": "^3.0.11",
-        "axios": "^1.13.2",
+        "axios": "^1.10.0",
         "dotenv": "^16.5.0",
         "ioredis": "^5.6.1",
+        "lodash": "^4.17.21",
         "marked": "^16.2.0",
         "node-cron": "^4.1.0",
         "node-fetch": "^2.7.0",
@@ -20791,7 +20790,7 @@
       "name": "codequal-autofix",
       "version": "0.1.0",
       "dependencies": {
-        "axios": "^0.30.2"
+        "lodash": "^4.17.21"
       },
       "devDependencies": {
         "@types/node": "^20.0.0",
diff --git a/package.json b/package.json
index b52e02ab..c54356b6 100644
--- a/package.json
+++ b/package.json
@@ -83,7 +83,7 @@
     "@modelcontextprotocol/sdk": "^1.10.2",
     "@supabase/supabase-js": "^2.49.4",
     "yaml": "^2.3.1",
-    "lodash": "4.17.15",
+    "lodash": "4.17.21",
     "axios": "0.30.2"
   },
   "packageManager": "npm@10.8.2"
diff --git a/packages/agents/package.json b/packages/agents/package.json
index 92dff796..2330a7bb 100644
--- a/packages/agents/package.json
+++ b/packages/agents/package.json
@@ -37,7 +37,7 @@
     "@types/jsonwebtoken": "^9.0.10",
     "@types/node": "^20.0.0",
     "@types/xml2js": "^0.4.14",
-    "lodash": "^4.17.19",
+    "lodash": "^4.17.21",
     "typescript": "^5.0.0"
   }
 }