diff --git a/packages/subapp-web/package.json b/packages/subapp-web/package.json
index 2bca75a7e..dd3c75795 100644
--- a/packages/subapp-web/package.json
+++ b/packages/subapp-web/package.json
@@ -33,7 +33,7 @@
     "jsesc": "^3.0.2",
     "loadjs": "^4.2.0",
     "lodash": "^4.17.15",
-    "node-fetch": "2.6.12",
+    "node-fetch": "2.7.0",
     "optional-require": "^1.1.8",
     "subapp-util": "^1.1.4",
     "xaa": "^1.7.3"