diff --git a/change/@rightcapital-phpdoc-parser-db0c7fbf-86cb-42f8-86c0-e2c3ea50b80c.json b/change/@rightcapital-phpdoc-parser-db0c7fbf-86cb-42f8-86c0-e2c3ea50b80c.json
new file mode 100644
index 00000000..4e19cabb
--- /dev/null
+++ b/change/@rightcapital-phpdoc-parser-db0c7fbf-86cb-42f8-86c0-e2c3ea50b80c.json
@@ -0,0 +1,7 @@
+{
+  "type": "patch",
+  "comment": "fix(deps): update dependency lodash to v4.17.23 [security]",
+  "packageName": "@rightcapital/phpdoc-parser",
+  "email": "29139614+renovate[bot]@users.noreply.github.com",
+  "dependentChangeType": "patch"
+}
diff --git a/package.json b/package.json
index 4f26bce6..9f83cf5a 100644
--- a/package.json
+++ b/package.json
@@ -37,7 +37,7 @@
   },
   "dependencies": {
     "@types/node": "22.19.6",
-    "lodash": "4.17.21",
+    "lodash": "4.17.23",
     "typescript": "5.9.3"
   },
   "devDependencies": {
diff --git a/pnpm-lock.yaml b/pnpm-lock.yaml
index 6552b946..df126ae8 100644
--- a/pnpm-lock.yaml
+++ b/pnpm-lock.yaml
@@ -12,8 +12,8 @@ importers:
         specifier: 22.19.6
         version: 22.19.6
       lodash:
-        specifier: 4.17.21
-        version: 4.17.21
+        specifier: 4.17.23
+        version: 4.17.23
       typescript:
         specifier: 5.9.3
         version: 5.9.3
@@ -2609,6 +2609,9 @@ packages:
   lodash@4.17.21:
     resolution: {integrity: sha512-v2kDEe57lecTulaDIuNTPy3Ry4gLGJ6Z1O3vE1krgXZNrsQ+LFTGHVxVjcXPs17LhbZVGedAJv8XZ1tvj5FvSg==}
 
+  lodash@4.17.23:
+    resolution: {integrity: sha512-LgVTMpQtIopCi79SJeDiP0TfWi5CNEc/L/aRdTh3yIvmZXTnheWpKjSZhnvMl8iXbC1tFg9gdHHDMLoV7CnG+w==}
+
   log-symbols@4.1.0:
     resolution: {integrity: sha512-8XPvpAA8uyhfteu8pIvQxpJZ7SYYdpUivZpGy6sFsBuKRY/7rQGavedeB8aK+Zkyq6upMFVL/9AW6vOYzfRyLg==}
     engines: {node: '>=10'}
@@ -5150,7 +5153,7 @@ snapshots:
       cosmiconfig: 8.3.6(typescript@5.9.3)
       execa: 5.1.1
       fs-extra: 11.3.1
-      lodash: 4.17.21
+      lodash: 4.17.23
       minimatch: 3.1.2
       p-graph: 1.1.2
       p-limit: 3.1.0
@@ -5676,7 +5679,7 @@ snapshots:
   eslint-plugin-lodash@8.0.0(eslint@9.13.0(jiti@2.5.1)):
     dependencies:
       eslint: 9.13.0(jiti@2.5.1)
-      lodash: 4.17.21
+      lodash: 4.17.23
 
   eslint-plugin-n@17.15.1(eslint@9.13.0(jiti@2.5.1)):
     dependencies:
@@ -6259,7 +6262,7 @@ snapshots:
       cli-width: 3.0.0
       external-editor: 3.1.0
       figures: 3.2.0
-      lodash: 4.17.21
+      lodash: 4.17.23
       mute-stream: 0.0.8
       ora: 5.4.1
       run-async: 2.4.1
@@ -6528,6 +6531,8 @@ snapshots:
 
   lodash@4.17.21: {}
 
+  lodash@4.17.23: {}
+
   log-symbols@4.1.0:
     dependencies:
       chalk: 4.1.2