diff --git a/package.json b/package.json
index cf393b5..c6ef681 100644
--- a/package.json
+++ b/package.json
@@ -30,7 +30,7 @@
     "koa-json": "^2.0.2",
     "koa-router": "^7.4.0",
     "koa-static": "^5.0.0",
-    "lodash": "^4.17.11",
+    "lodash": "^4.17.21",
     "module-alias": "^2.2.0",
     "mysql2": "^1.6.5",
     "nodemon": "^1.18.9",
diff --git a/yarn.lock b/yarn.lock
index 096b065..8d222d8 100644
--- a/yarn.lock
+++ b/yarn.lock
@@ -1572,9 +1572,9 @@ lodash.once@^4.0.0:
   version "4.1.1"
   resolved "https://registry.npmjs.org/lodash.once/-/lodash.once-4.1.1.tgz#0dd3971213c7c56df880977d504c88fb471a97ac"
 
-lodash@^4.17.11:
-  version "4.17.11"
-  resolved "https://registry.npmjs.org/lodash/-/lodash-4.17.11.tgz#b39ea6229ef607ecd89e2c8df12536891cac9b8d"
+lodash@^4.17.11, lodash@^4.17.21:
+  version "4.17.21"
+  resolved "https://registry.yarnpkg.com/lodash/-/lodash-4.17.21.tgz#679591c564c3bffaae8454cf0b3df370c3d6911c"
 
 long@^4.0.0:
   version "4.0.0"