diff --git a/CHANGELOG.md b/CHANGELOG.md
index bf307d2..c1364e4 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -2,6 +2,8 @@
 - Upgrade ldapauth-fork
 - Drop support NodeJS < 8.x
 - Make groupNameAttribute option take effect #59 (@jharris4)
+- Fix lodash security issue
+- Fix authentication issues #47 #60
 
 # 3.1.0
 - Update ldapauth-fork (Rebind admin client after reconnect)
\ No newline at end of file
diff --git a/package-lock.json b/package-lock.json
index 3b5dbb5..32c9015 100644
--- a/package-lock.json
+++ b/package-lock.json
@@ -13,9 +13,9 @@
       }
     },
     "@types/node": {
-      "version": "10.14.10",
-      "resolved": "https://registry.npmjs.org/@types/node/-/node-10.14.10.tgz",
-      "integrity": "sha512-V8wj+w2YMNvGuhgl/MA5fmTxgjmVHVoasfIaxMMZJV6Y8Kk+Ydpi1z2whoShDCJ2BuNVoqH/h1hrygnBxkrw/Q=="
+      "version": "10.14.12",
+      "resolved": "https://registry.npmjs.org/@types/node/-/node-10.14.12.tgz",
+      "integrity": "sha512-QcAKpaO6nhHLlxWBvpc4WeLrTvPqlHOvaj0s5GriKkA1zq+bsFBPpfYCvQhLqLgYlIko8A9YrPdaMHCo5mBcpg=="
     },
     "abbrev": {
       "version": "1.1.1",
@@ -766,9 +766,9 @@
       }
     },
     "lodash": {
-      "version": "4.17.11",
-      "resolved": "https://registry.npmjs.org/lodash/-/lodash-4.17.11.tgz",
-      "integrity": "sha512-cQKh8igo5QUhZ7lg38DYWAxMvjSAKG0A8wGSVimP07SIUEK2UO+arSRKbRZWtelMtN5V0Hkwh5ryOto/SshYIg==",
+      "version": "4.17.14",
+      "resolved": "https://registry.npmjs.org/lodash/-/lodash-4.17.14.tgz",
+      "integrity": "sha512-mmKYbW3GLuJeX+iGP+Y7Gp1AiGHGbXHCOh/jZmrawMmsE7MS4znI3RL2FsjbqOyMayHInjOeykW7PEajUk1/xw==",
       "dev": true
     },
     "log-symbols": {