diff --git a/package.json b/package.json
index a7ab0e4f9e..a2b941d2f6 100644
--- a/package.json
+++ b/package.json
@@ -11,7 +11,7 @@
     "body-parser": "1.17.1",
     "bytes": "^2.2.0",
     "colors": "1.1.2",
-    "compression": "1.7.0",
+    "compression": "1.8.1",
     "connect-busboy": "0.0.2",
     "connect-redis": "3.0.2",
     "cookie-parser": "1.4.1",
@@ -21,7 +21,7 @@
     "ejs-mate": "2.3.0",
     "eventproxy": "1.0.0",
     "express": "4.16.0",
-    "express-session": "1.12.1",
+    "express-session": "1.18.2",
     "helmet": "1.3.0",
     "ioredis": "2.0.0",
     "jpush-sdk": "3.3.2",
@@ -45,7 +45,7 @@
     "qn": "1.3.0",
     "ready": "0.1.1",
     "request": "2.81.0",
-    "response-time": "2.3.1",
+    "response-time": "2.3.4",
     "superagent": "2.0.0",
     "utility": "1.6.0",
     "validator": "5.1.0",