diff --git a/package.json b/package.json
index 9e8b652..9f27aa5 100644
--- a/package.json
+++ b/package.json
@@ -63,7 +63,7 @@
     "koa-router": "^7.4.0",
     "koa-static": "^5.0.0",
     "less": "^3.8.1",
-    "lodash": "^4.17.19",
+    "lodash": "^4.17.21",
     "lru-cache": "^4.1.3",
     "normalize.css": "^8.0.0",
     "nunjucks": "^3.1.3",
diff --git a/yarn.lock b/yarn.lock
index d665370..3c71386 100644
--- a/yarn.lock
+++ b/yarn.lock
@@ -5348,9 +5348,9 @@ lodash.uniq@^4.5.0:
   version "4.5.0"
   resolved "http://registry.npm.taobao.org/lodash.uniq/download/lodash.uniq-4.5.0.tgz#d0225373aeb652adc1bc82e4945339a842754773"
 
-"lodash@>=3.5 <5", lodash@^4.13.1, lodash@^4.17.10, lodash@^4.17.19, lodash@^4.17.4, lodash@^4.17.5:
-  version "4.17.19"
-  resolved "https://registry.yarnpkg.com/lodash/-/lodash-4.17.19.tgz#e48ddedbe30b3321783c5b4301fbd353bc1e4a4b"
+"lodash@>=3.5 <5", lodash@^4.13.1, lodash@^4.17.10, lodash@^4.17.21, lodash@^4.17.4, lodash@^4.17.5:
+  version "4.17.21"
+  resolved "https://registry.yarnpkg.com/lodash/-/lodash-4.17.21.tgz#679591c564c3bffaae8454cf0b3df370c3d6911c"
 
 log-symbols@^2.2.0:
   version "2.2.0"