diff --git a/vulnerable_repos/NodeGoat/package.json b/vulnerable_repos/NodeGoat/package.json
index b2eb65a..d4edd2e 100644
--- a/vulnerable_repos/NodeGoat/package.json
+++ b/vulnerable_repos/NodeGoat/package.json
@@ -14,6 +14,7 @@
     "express-session": "^1.13.0",
     "forever": "^2.0.0",
     "helmet": "^2.0.0",
+    "lodash": "^4.17.19",
     "marked": "0.3.5",
     "mongodb": "^2.1.18",
     "needle": "2.2.4",