diff --git a/.snyk b/.snyk
index fecea87b10..78ac1c89d3 100644
--- a/.snyk
+++ b/.snyk
@@ -1,5 +1,7 @@
-version: v1.5.2
+# Snyk (https://snyk.io) policy file, patches or ignores known vulnerabilities.
+version: v1.13.5
 ignore: {}
+# patches apply the minimum changes required to fix a vulnerability
 patch:
   'npm:minimatch:20160620':
     - snyk > recursive-readdir > minimatch:
@@ -12,3 +14,26 @@ patch:
         patched: '2016-07-30T14:02:31.280Z'
     - socket.io > socket.io-client > engine.io-client > ws:
         patched: '2016-07-30T14:02:31.280Z'
+  SNYK-JS-LODASH-450202:
+    - snyk > snyk-nodejs-lockfile-parser > lodash:
+        patched: '2019-07-04T00:34:08.760Z'
+    - snyk > lodash:
+        patched: '2019-07-04T00:34:08.760Z'
+    - snyk > snyk-nuget-plugin > lodash:
+        patched: '2019-07-04T00:34:08.760Z'
+    - snyk > @snyk/dep-graph > lodash:
+        patched: '2019-07-04T00:34:08.760Z'
+    - snyk > inquirer > lodash:
+        patched: '2019-07-04T00:34:08.760Z'
+    - snyk > snyk-config > lodash:
+        patched: '2019-07-04T00:34:08.760Z'
+    - snyk > snyk-mvn-plugin > lodash:
+        patched: '2019-07-04T00:34:08.760Z'
+    - snyk > snyk-go-plugin > graphlib > lodash:
+        patched: '2019-07-04T00:34:08.760Z'
+    - snyk > snyk-nodejs-lockfile-parser > graphlib > lodash:
+        patched: '2019-07-04T00:34:08.760Z'
+    - snyk > snyk-php-plugin > @snyk/composer-lockfile-parser > lodash:
+        patched: '2019-07-04T00:34:08.760Z'
+    - snyk > @snyk/dep-graph > graphlib > lodash:
+        patched: '2019-07-04T00:34:08.760Z'
diff --git a/package.json b/package.json
index 8c2b226bb4..4ccf007753 100644
--- a/package.json
+++ b/package.json
@@ -46,7 +46,7 @@
     "moment": "latest",
     "request": "^2.74.0",
     "rrule": "latest",
-    "snyk": "^1.14.1",
+    "snyk": "^1.189.0",
     "socket.io": "^1.4.6",
     "valid-url": "latest",
     "walk": "latest"