diff --git a/CHANGELOG.md b/CHANGELOG.md
index 0997a3a..d5941bf 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -1,5 +1,9 @@
 # 变更历史
 
+## v0.8.10 (2024-02-14)
+
+- 升级依赖 `axios@^0.28.0` for the CVE-2023-45857;
+
 ## v0.8.9 (2024-02-12)
 
 - 取消对`axios/lib/utils`的依赖。
diff --git a/package.json b/package.json
index c3edd0e..ba25a5c 100644
--- a/package.json
+++ b/package.json
@@ -1,6 +1,6 @@
 {
   "name": "wechatpay-axios-plugin",
-  "version": "0.8.9",
+  "version": "0.8.10",
   "description": "微信支付APIv2及v3 NodeJS SDK，支持CLI模式请求OpenAPI，支持v3证书下载，v2付款码支付、企业付款、退款，企业微信-企业支付-企业红包/向员工付款，v2&v3 Native支付、扫码支付、H5支付、JSAPI/小程序支付、合单支付...",
   "main": "index.js",
   "typings": "index.d.ts",
@@ -51,7 +51,7 @@
   "author": "James ZHANG",
   "license": "MIT",
   "dependencies": {
-    "axios": "0.21.2 - 0.27",
+    "axios": "^0.28.0",
     "xml2js": "0.5 - 0.6"
   },
   "peerDependencies": {