diff --git a/package-lock.json b/package-lock.json
index 15e612d70..84061d5d6 100644
--- a/package-lock.json
+++ b/package-lock.json
@@ -276,6 +276,11 @@
         }
       }
     },
+    "acorn-walk": {
+      "version": "8.2.0",
+      "resolved": "https://registry.npmjs.org/acorn-walk/-/acorn-walk-8.2.0.tgz",
+      "integrity": "sha512-k+iyHEuPgSw6SbuDpGQM+06HQUa04DZ3o+F6CSzXMvvI5KMvnaEqXe+YVe555R9nn6GPt404fos4wcgpw12SDA=="
+    },
     "add-dom-event-listener": {
       "version": "1.0.2",
       "resolved": "http://registry.npm.taobao.org/add-dom-event-listener/download/add-dom-event-listener-1.0.2.tgz",
@@ -25273,9 +25278,20 @@
       }
     },
     "vm2": {
-      "version": "3.9.1",
-      "resolved": "https://registry.npm.taobao.org/vm2/download/vm2-3.9.1.tgz",
-      "integrity": "sha1-Ebk5Cgd0X8+wtoIHjoT8rRR6rpc="
+      "version": "3.9.17",
+      "resolved": "https://registry.npmjs.org/vm2/-/vm2-3.9.17.tgz",
+      "integrity": "sha512-AqwtCnZ/ERcX+AVj9vUsphY56YANXxRuqMb7GsDtAr0m0PcQX3u0Aj3KWiXM0YAHy7i6JEeHrwOnwXbGYgRpAw==",
+      "requires": {
+        "acorn": "^8.7.0",
+        "acorn-walk": "^8.2.0"
+      },
+      "dependencies": {
+        "acorn": {
+          "version": "8.8.2",
+          "resolved": "https://registry.npmjs.org/acorn/-/acorn-8.8.2.tgz",
+          "integrity": "sha512-xjIYgE8HBrkpd/sJqOGNspf8uHG+NOHGOw6a/Urj8taM2EXfdNAH2oFcPeIFfsv3+kz/mJrS5VuMqbNLjCa2vw=="
+        }
+      }
     },
     "vows": {
       "version": "0.6.0",
diff --git a/package.json b/package.json
index e80a4a515..f8d228a84 100644
--- a/package.json
+++ b/package.json
@@ -84,7 +84,7 @@
     "tslib": "1.8.0",
     "underscore": "1.8.3",
     "url": "0.11.0",
-    "vm2": "^3.8.4",
+    "vm2": "^3.9.17",
     "yapi-plugin-qsso": "^1.1.0"
   },
   "devDependencies": {