diff --git a/packages/@vue/cli/package.json b/packages/@vue/cli/package.json
index 8115502b15..3012a3a229 100644
--- a/packages/@vue/cli/package.json
+++ b/packages/@vue/cli/package.json
@@ -36,7 +36,7 @@
     "debug": "^3.1.0",
     "deepmerge": "^2.0.1",
     "download-git-repo": "^1.0.2",
-    "ejs": "^2.5.7",
+    "ejs": "^3.1.10",
     "execa": "^0.10.0",
     "fs-extra": "^6.0.0",
     "globby": "^8.0.1",