diff --git a/package-lock.json b/package-lock.json
index 29dbed2..e9f6d66 100644
--- a/package-lock.json
+++ b/package-lock.json
@@ -5685,9 +5685,9 @@
       }
     },
     "lodash": {
-      "version": "4.17.20",
-      "resolved": "https://registry.npm.taobao.org/lodash/download/lodash-4.17.20.tgz?cache=0&sync_timestamp=1597336001963&other_urls=https%3A%2F%2Fregistry.npm.taobao.org%2Flodash%2Fdownload%2Flodash-4.17.20.tgz",
-      "integrity": "sha1-tEqbYpe8tpjxxRo1RaKzs2jVnFI="
+      "version": "4.17.21",
+      "resolved": "https://registry.npmjs.org/lodash/-/lodash-4.17.21.tgz",
+      "integrity": "sha512-v2kDEe57lecTulaDIuNTPy3Ry4gLGJ6Z1O3vE1krgXZNrsQ+LFTGHVxVjcXPs17LhbZVGedAJv8XZ1tvj5FvSg=="
     },
     "lodash.assignin": {
       "version": "4.2.0",
diff --git a/package.json b/package.json
index 1aa6660..ae83d17 100644
--- a/package.json
+++ b/package.json
@@ -22,7 +22,7 @@
     "@types/config": "^0.0.36",
     "@types/lodash": "^4.14.165",
     "config": "^3.3.2",
-    "lodash": "^4.17.20",
+    "lodash": "^4.17.21",
     "wechaty": "^0.48.10",
     "wechaty-plugin-contrib": "^0.14.15",
     "wechaty-puppet": "^0.32.3",