diff --git a/package-lock.json b/package-lock.json
index c1d845e..bc4d65c 100644
--- a/package-lock.json
+++ b/package-lock.json
@@ -6,7 +6,7 @@
   "packages": {
     "": {
       "name": "@amilabs/api-server",
-      "version": "1.10.10",
+      "version": "1.10.13",
       "license": "ISC",
       "dependencies": {
         "@amilabs/logger": "1.0.1",
@@ -22,7 +22,7 @@
         "express": "4.17.1",
         "got": "11.1.0",
         "lockfile": "1.0.4",
-        "lodash": "4.17.15",
+        "lodash": "4.17.21",
         "mongodb": "3.3.3",
         "optimist": "0.6.1",
         "redis": "2.8.0",
@@ -51,6 +51,11 @@
         "winston": "3.2.1"
       }
     },
+    "node_modules/@amilabs/logger/node_modules/lodash": {
+      "version": "4.17.15",
+      "resolved": "https://registry.npmjs.org/lodash/-/lodash-4.17.15.tgz",
+      "integrity": "sha512-8xOcRHvCjnocdS5cpwXQXVzmmh5e5+saE2QGoeQmbKmRS6J3VQppPOIt0MnmE+4xlZoumy0GPG0D0MVIQbNA1A=="
+    },
     "node_modules/@amilabs/metric": {
       "version": "1.1.0",
       "resolved": "https://registry.npmjs.org/@amilabs/metric/-/metric-1.1.0.tgz",
@@ -60,6 +65,11 @@
         "lodash": "4.17.15"
       }
     },
+    "node_modules/@amilabs/metric/node_modules/lodash": {
+      "version": "4.17.15",
+      "resolved": "https://registry.npmjs.org/lodash/-/lodash-4.17.15.tgz",
+      "integrity": "sha512-8xOcRHvCjnocdS5cpwXQXVzmmh5e5+saE2QGoeQmbKmRS6J3VQppPOIt0MnmE+4xlZoumy0GPG0D0MVIQbNA1A=="
+    },
     "node_modules/@babel/code-frame": {
       "version": "7.10.3",
       "dev": true,
@@ -856,6 +866,11 @@
         "uuid": "3.4.0"
       }
     },
+    "node_modules/clickhouse/node_modules/lodash": {
+      "version": "4.17.15",
+      "resolved": "https://registry.npmjs.org/lodash/-/lodash-4.17.15.tgz",
+      "integrity": "sha512-8xOcRHvCjnocdS5cpwXQXVzmmh5e5+saE2QGoeQmbKmRS6J3VQppPOIt0MnmE+4xlZoumy0GPG0D0MVIQbNA1A=="
+    },
     "node_modules/clickhouse/node_modules/uuid": {
       "version": "3.4.0",
       "license": "MIT",
@@ -2699,8 +2714,9 @@
       }
     },
     "node_modules/lodash": {
-      "version": "4.17.15",
-      "license": "MIT"
+      "version": "4.17.21",
+      "resolved": "https://registry.npmjs.org/lodash/-/lodash-4.17.21.tgz",
+      "integrity": "sha512-v2kDEe57lecTulaDIuNTPy3Ry4gLGJ6Z1O3vE1krgXZNrsQ+LFTGHVxVjcXPs17LhbZVGedAJv8XZ1tvj5FvSg=="
     },
     "node_modules/lodash.defaults": {
       "version": "4.2.0",
@@ -4779,6 +4795,13 @@
         "lodash": "4.17.15",
         "uuid": "3.3.3",
         "winston": "3.2.1"
+      },
+      "dependencies": {
+        "lodash": {
+          "version": "4.17.15",
+          "resolved": "https://registry.npmjs.org/lodash/-/lodash-4.17.15.tgz",
+          "integrity": "sha512-8xOcRHvCjnocdS5cpwXQXVzmmh5e5+saE2QGoeQmbKmRS6J3VQppPOIt0MnmE+4xlZoumy0GPG0D0MVIQbNA1A=="
+        }
       }
     },
     "@amilabs/metric": {
@@ -4788,6 +4811,13 @@
       "requires": {
         "hot-shots": "6.5.1",
         "lodash": "4.17.15"
+      },
+      "dependencies": {
+        "lodash": {
+          "version": "4.17.15",
+          "resolved": "https://registry.npmjs.org/lodash/-/lodash-4.17.15.tgz",
+          "integrity": "sha512-8xOcRHvCjnocdS5cpwXQXVzmmh5e5+saE2QGoeQmbKmRS6J3VQppPOIt0MnmE+4xlZoumy0GPG0D0MVIQbNA1A=="
+        }
       }
     },
     "@babel/code-frame": {
@@ -5373,6 +5403,11 @@
         "uuid": "3.4.0"
       },
       "dependencies": {
+        "lodash": {
+          "version": "4.17.15",
+          "resolved": "https://registry.npmjs.org/lodash/-/lodash-4.17.15.tgz",
+          "integrity": "sha512-8xOcRHvCjnocdS5cpwXQXVzmmh5e5+saE2QGoeQmbKmRS6J3VQppPOIt0MnmE+4xlZoumy0GPG0D0MVIQbNA1A=="
+        },
         "uuid": {
           "version": "3.4.0"
         }
@@ -6631,7 +6666,9 @@
       }
     },
     "lodash": {
-      "version": "4.17.15"
+      "version": "4.17.21",
+      "resolved": "https://registry.npmjs.org/lodash/-/lodash-4.17.21.tgz",
+      "integrity": "sha512-v2kDEe57lecTulaDIuNTPy3Ry4gLGJ6Z1O3vE1krgXZNrsQ+LFTGHVxVjcXPs17LhbZVGedAJv8XZ1tvj5FvSg=="
     },
     "lodash.defaults": {
       "version": "4.2.0"
diff --git a/package.json b/package.json
index 7c99a7b..f199de4 100644
--- a/package.json
+++ b/package.json
@@ -32,7 +32,7 @@
     "express": "4.17.1",
     "got": "11.1.0",
     "lockfile": "1.0.4",
-    "lodash": "4.17.15",
+    "lodash": "4.17.21",
     "mongodb": "3.3.3",
     "optimist": "0.6.1",
     "redis": "2.8.0",