diff --git a/package.json b/package.json
index 3d4a9cb..d29988b 100644
--- a/package.json
+++ b/package.json
@@ -11,7 +11,7 @@
   "preferGlobal": true,
   "dependencies": {
     "colors": "^1.4.0",
-    "crypto-js": "^4.0.0",
+    "crypto-js": "^4.2.0",
     "fs": "^0.0.1-security",
     "path": "^0.12.7"
   }
diff --git a/yarn.lock b/yarn.lock
index aa22f8e..53ac194 100644
--- a/yarn.lock
+++ b/yarn.lock
@@ -7,10 +7,10 @@ colors@^1.4.0:
   resolved "https://registry.npmjs.org/colors/-/colors-1.4.0.tgz#c50491479d4c1bdaed2c9ced32cf7c7dc2360f78"
   integrity sha512-a+UqTh4kgZg/SlGvfbzDHpgRu7AAQOmmqRHJnxhRZICKFUT91brVhNNt58CMWU9PsBbv3PDCZUHbVxuDiH2mtA==
 
-crypto-js@^4.0.0:
-  version "4.0.0"
-  resolved "https://registry.npm.taobao.org/crypto-js/download/crypto-js-4.0.0.tgz?cache=0&sync_timestamp=1581509247325&other_urls=https%3A%2F%2Fregistry.npm.taobao.org%2Fcrypto-js%2Fdownload%2Fcrypto-js-4.0.0.tgz#2904ab2677a9d042856a2ea2ef80de92e4a36dcc"
-  integrity sha1-KQSrJnep0EKFai6i74DekuSjbcw=
+crypto-js@^4.2.0:
+  version "4.2.0"
+  resolved "https://registry.yarnpkg.com/crypto-js/-/crypto-js-4.2.0.tgz#4d931639ecdfd12ff80e8186dba6af2c2e856631"
+  integrity sha512-KALDyEYgpY+Rlob/iriUtjV6d5Eq+Y191A5g4UqLAi8CyGP9N1+FdVbkc1SxKc2r4YAYqG8JzO2KGL+AizD70Q==
 
 fs@^0.0.1-security:
   version "0.0.1-security"