diff --git a/packages/taro-cli/package.json b/packages/taro-cli/package.json
index 345b9d89e92e..29b61947b5b8 100644
--- a/packages/taro-cli/package.json
+++ b/packages/taro-cli/package.json
@@ -112,7 +112,7 @@
     "shelljs": "^0.8.1",
     "stylelint": "13.6.1",
     "tapable": "^1.1.3",
-    "through2": "^2.0.3",
+    "through2": "^4.0.2",
     "vinyl": "^2.1.0",
     "vinyl-fs": "^3.0.2",
     "xml2js": "^0.4.19",
diff --git a/yarn.lock b/yarn.lock
index abbe57b77d89..418cb29e4f0a 100644
--- a/yarn.lock
+++ b/yarn.lock
@@ -28342,7 +28342,7 @@ through2@^3.0.0, through2@^3.0.2:
     inherits "^2.0.4"
     readable-stream "2 || 3"
 
-through2@^4.0.0:
+through2@^4.0.0, through2@^4.0.2:
   version "4.0.2"
   resolved "https://registry.yarnpkg.com/through2/-/through2-4.0.2.tgz#a7ce3ac2a7a8b0b966c80e7c49f0484c3b239764"
   integrity sha512-iOqSav00cVxEEICeD7TjLB1sueEL+81Wpzp2bY17uZjZN0pWZPuo4suZ/61VujxmqSGFfgOcNuTZ85QJwNZQpw==