diff --git a/package-lock.json b/package-lock.json
index ccacfad678..20d457c088 100644
--- a/package-lock.json
+++ b/package-lock.json
@@ -5682,9 +5682,9 @@
       }
     },
     "node-fetch": {
-      "version": "2.5.0",
-      "resolved": "https://registry.npmjs.org/node-fetch/-/node-fetch-2.5.0.tgz",
-      "integrity": "sha512-YuZKluhWGJwCcUu4RlZstdAxr8bFfOVHakc1mplwHkk8J+tqM1Y5yraYvIUpeX8aY7+crCwiELJq7Vl0o0LWXw==",
+      "version": "2.6.0",
+      "resolved": "https://registry.npmjs.org/node-fetch/-/node-fetch-2.6.0.tgz",
+      "integrity": "sha512-8dG4H5ujfvFiqDmVu9fQ5bOHUC15JMjMY/Zumv26oOvvVJjM67KF8koCWIabKQ1GJIa9r2mMZscBq/TbdOcmNA==",
       "dev": true
     },
     "node-int64": {
diff --git a/package.json b/package.json
index 810cf8cf77..73c8319981 100644
--- a/package.json
+++ b/package.json
@@ -103,7 +103,7 @@
     "mocha-junit-reporter": "1.22.0",
     "mocha-multi-reporters": "1.1.7",
     "mocha-stress": "1.0.0",
-    "node-fetch": "2.5.0",
+    "node-fetch": "2.6.0",
     "nyc": "14.0.0",
     "relay-compiler": "3.0.0",
     "semver": "6.0.0",