diff --git a/package.json b/package.json
index ac9dda4..d0204f0 100644
--- a/package.json
+++ b/package.json
@@ -25,7 +25,7 @@
     "jsonwebtoken": "^8.3.0",
     "koa-compose": "^4.1.0",
     "koa-is-json": "^1.0.0",
-    "lodash": "^4.17.10",
+    "lodash": "^4.17.21",
     "marked": "^0.5.0",
     "merge": "^1.2.0",
     "moment": "^2.22.2",
diff --git a/yarn.lock b/yarn.lock
index f76c434..8526777 100644
--- a/yarn.lock
+++ b/yarn.lock
@@ -5765,7 +5765,7 @@ lodash.values@^4.3.0:
   version "4.3.0"
   resolved "http://registry.npm.taobao.org/lodash.values/download/lodash.values-4.3.0.tgz#a3a6c2b0ebecc5c2cba1c17e6e620fe81b53d347"
 
-lodash@4.17.11, lodash@^4.17.10, lodash@^4.17.11, lodash@^4.17.2, lodash@^4.17.4, lodash@^4.2.0, lodash@^4.2.1, lodash@^4.3.0:
+lodash@4.17.11:
   version "4.17.11"
   resolved "http://registry.npm.taobao.org/lodash/download/lodash-4.17.11.tgz#b39ea6229ef607ecd89e2c8df12536891cac9b8d"
 
@@ -5777,6 +5777,10 @@ lodash@^3.3.1:
   version "3.10.1"
   resolved "http://registry.npm.taobao.org/lodash/download/lodash-3.10.1.tgz#5bf45e8e49ba4189e17d482789dfd15bd140b7b6"
 
+lodash@^4.17.10, lodash@^4.17.11, lodash@^4.17.2, lodash@^4.17.21, lodash@^4.17.4, lodash@^4.2.0, lodash@^4.2.1, lodash@^4.3.0:
+  version "4.17.21"
+  resolved "https://registry.npm.taobao.org/lodash/download/lodash-4.17.21.tgz#679591c564c3bffaae8454cf0b3df370c3d6911c"
+
 log-symbols@^2.2.0:
   version "2.2.0"
   resolved "http://registry.npm.taobao.org/log-symbols/download/log-symbols-2.2.0.tgz#5740e1c5d6f0dfda4ad9323b5332107ef6b4c40a"