diff --git a/.github/workflows/dependency-review.yml b/.github/workflows/dependency-review.yml
new file mode 100644
index 00000000000..aff7b574346
--- /dev/null
+++ b/.github/workflows/dependency-review.yml
@@ -0,0 +1,20 @@
+name: 'Dependency Review'
+on: [pull_request]
+
+permissions:
+  contents: read
+  pull-requests: write
+
+jobs:
+  dependency-review:
+    runs-on: ubuntu-latest
+    steps:
+      - name: 'Checkout Repository'
+        uses: actions/checkout@v3
+      - name: 'Dependency Review'
+        uses: actions/dependency-review-action@fix-advisory-filters
+        with:
+          fail-on-severity: critical
+
+          comment-summary-in-pr: always
+          allow-ghsas: "GHSA-jf85-cpcp-j695"
diff --git a/package.json b/package.json
index 7d5c7c32226..39bf5ec05a6 100644
--- a/package.json
+++ b/package.json
@@ -150,6 +150,7 @@
     "jssha": "^3.1.1",
     "juicy-chat-bot": "~0.7.1",
     "libxmljs2": "^0.32.0",
+    "lodash": "4.17.0",
     "marsdb": "^0.6.11",
     "morgan": "^1.10.0",
     "multer": "^1.4.5-lts.1",