diff --git a/package-lock.json b/package-lock.json
index 7a03d34..114c657 100644
--- a/package-lock.json
+++ b/package-lock.json
@@ -6140,9 +6140,9 @@
       "dev": true
     },
     "koa": {
-      "version": "2.8.1",
-      "resolved": "https://registry.npmjs.org/koa/-/koa-2.8.1.tgz",
-      "integrity": "sha512-iCgjRkntcVud5amnioi+79r7TPVhKPfCY8UzL9GjyU+nIWTE9xsqyrJ6kib3InT9JYRyUu9Y67i5apCjf997TQ==",
+      "version": "2.9.0",
+      "resolved": "https://registry.npmjs.org/koa/-/koa-2.9.0.tgz",
+      "integrity": "sha512-Y1kb5wqcEm3FuFmPenIX3o61zbKVx+wy0p8kiG+DAv70WiTrnoupDQy8fpLYT6esaJmLdzgzmGbLCKcamw+VvA==",
       "requires": {
         "accepts": "^1.3.5",
         "cache-content-type": "^1.0.0",
@@ -6153,6 +6153,7 @@
         "delegates": "^1.0.0",
         "depd": "^1.1.2",
         "destroy": "^1.0.4",
+        "encodeurl": "^1.0.2",
         "error-inject": "^1.0.0",
         "escape-html": "^1.0.3",
         "fresh": "~0.5.2",
diff --git a/package.json b/package.json
index 832b64b..0b3c5f6 100644
--- a/package.json
+++ b/package.json
@@ -27,7 +27,7 @@
     "express": "^4.17.1",
     "human-readable-numbers": "^0.9.5",
     "ioredis": "^4.14.0",
-    "koa": "^2.8.1",
+    "koa": "^2.9.0",
     "koa-router": "^7.4.0",
     "koa-send": "^5.0.0",
     "mem": "^5.1.1",