diff --git a/metahash-js/package-lock.json b/metahash-js/package-lock.json
index 1bb0a7a..9eb7337 100644
--- a/metahash-js/package-lock.json
+++ b/metahash-js/package-lock.json
@@ -1680,9 +1680,9 @@
       "dev": true
     },
     "node-fetch": {
-      "version": "2.3.0",
-      "resolved": "https://registry.npmjs.org/node-fetch/-/node-fetch-2.3.0.tgz",
-      "integrity": "sha512-MOd8pV3fxENbryESLgVIeaGKrdl+uaYhCSSVkjeOb/31/njTpcis5aWfdqgNlHIrKOLRbMnfPINPOML2CIFeXA=="
+      "version": "2.6.1",
+      "resolved": "https://registry.npmjs.org/node-fetch/-/node-fetch-2.6.1.tgz",
+      "integrity": "sha512-V4aYg89jEoVRxRb2fJdAg8FHvI7cEyYdVAh94HH0UIK8oJxUfkjlDQN9RbMx+bEjP7+ggMiFRprSti032Oipxw=="
     },
     "nofilter": {
       "version": "1.0.2",
diff --git a/metahash-js/package.json b/metahash-js/package.json
index ca004bb..a553807 100644
--- a/metahash-js/package.json
+++ b/metahash-js/package.json
@@ -5,7 +5,7 @@
     "elliptic": "6.4.1",
     "key-encoder": "1.1.7",
     "locutus": "2.0.10",
-    "node-fetch": "2.3.0"
+    "node-fetch": "2.6.1"
   },
   "devDependencies": {
     "browserify": "16.2.3",