diff --git a/integration/messaging/package.json b/integration/messaging/package.json
index a3f62b7f8ec..48cccec1170 100644
--- a/integration/messaging/package.json
+++ b/integration/messaging/package.json
@@ -15,7 +15,7 @@
     "express": "4.17.1",
     "geckodriver": "2.0.4",
     "mocha": "9.1.1",
-    "node-fetch": "2.6.5",
+    "node-fetch": "2.6.7",
     "selenium-assistant": "6.1.0"
   }
 }
diff --git a/packages/auth-compat/package.json b/packages/auth-compat/package.json
index d3f75ab4294..02bfd060a3f 100644
--- a/packages/auth-compat/package.json
+++ b/packages/auth-compat/package.json
@@ -47,7 +47,7 @@
     "@firebase/auth-types": "0.11.0",
     "@firebase/component": "0.5.10",
     "@firebase/util": "1.4.3",
-    "node-fetch": "2.6.5",
+    "node-fetch": "2.6.7",
     "selenium-webdriver": "^4.0.0-beta.2",
     "tslib": "^2.1.0"
   },
@@ -75,4 +75,4 @@
     ],
     "reportDir": "./coverage/node"
   }
-}
\ No newline at end of file
+}
diff --git a/packages/auth/package.json b/packages/auth/package.json
index 3b8454da97d..64832af8f2d 100644
--- a/packages/auth/package.json
+++ b/packages/auth/package.json
@@ -80,7 +80,7 @@
     "@firebase/component": "0.5.10",
     "@firebase/logger": "0.3.2",
     "@firebase/util": "1.4.3",
-    "node-fetch": "2.6.5",
+    "node-fetch": "2.6.7",
     "selenium-webdriver": "4.0.0-rc-1",
     "tslib": "^2.1.0"
   },
diff --git a/packages/firestore/package.json b/packages/firestore/package.json
index b1903e1c2fe..4691d95bed9 100644
--- a/packages/firestore/package.json
+++ b/packages/firestore/package.json
@@ -83,7 +83,7 @@
     "@firebase/webchannel-wrapper": "0.6.1",
     "@grpc/grpc-js": "^1.3.2",
     "@grpc/proto-loader": "^0.6.0",
-    "node-fetch": "2.6.5",
+    "node-fetch": "2.6.7",
     "tslib": "^2.1.0"
   },
   "peerDependencies": {
diff --git a/packages/functions/package.json b/packages/functions/package.json
index 7b03b8df6a8..efa9fb52b32 100644
--- a/packages/functions/package.json
+++ b/packages/functions/package.json
@@ -66,7 +66,7 @@
     "@firebase/auth-interop-types": "0.1.6",
     "@firebase/app-check-interop-types": "0.1.0",
     "@firebase/util": "1.4.3",
-    "node-fetch": "2.6.5",
+    "node-fetch": "2.6.7",
     "tslib": "^2.1.0"
   },
   "nyc": {
@@ -75,4 +75,4 @@
     ],
     "reportDir": "./coverage/node"
   }
-}
\ No newline at end of file
+}
diff --git a/packages/rules-unit-testing/package.json b/packages/rules-unit-testing/package.json
index 867e3357566..fffca9291cf 100644
--- a/packages/rules-unit-testing/package.json
+++ b/packages/rules-unit-testing/package.json
@@ -39,6 +39,6 @@
     "url": "https://github.com/firebase/firebase-js-sdk/issues"
   },
   "dependencies": {
-    "node-fetch": "2.6.5"
+    "node-fetch": "2.6.7"
   }
 }
diff --git a/packages/storage/package.json b/packages/storage/package.json
index a062621d389..afeb7669f3c 100644
--- a/packages/storage/package.json
+++ b/packages/storage/package.json
@@ -43,7 +43,7 @@
   "dependencies": {
     "@firebase/util": "1.4.3",
     "@firebase/component": "0.5.10",
-    "node-fetch": "2.6.5",
+    "node-fetch": "2.6.7",
     "tslib": "^2.1.0"
   },
   "peerDependencies": {
@@ -67,4 +67,4 @@
     "url": "https://github.com/firebase/firebase-js-sdk/issues"
   },
   "typings": "dist/src/index.d.ts"
-}
\ No newline at end of file
+}
diff --git a/repo-scripts/changelog-generator/package.json b/repo-scripts/changelog-generator/package.json
index 6f9026fc554..93759895287 100644
--- a/repo-scripts/changelog-generator/package.json
+++ b/repo-scripts/changelog-generator/package.json
@@ -18,7 +18,7 @@
   "dependencies": {
     "@changesets/types": "3.3.0",
     "@changesets/get-github-info": "0.5.0",
-    "node-fetch": "2.6.5",
+    "node-fetch": "2.6.7",
     "@types/node-fetch": "2.5.12"
   },
   "license": "Apache-2.0",
diff --git a/yarn.lock b/yarn.lock
index 5fb5ae129b1..3f646db559b 100644
--- a/yarn.lock
+++ b/yarn.lock
@@ -11918,10 +11918,10 @@ node-emoji@^1.4.1:
   dependencies:
     lodash "^4.17.21"
 
-node-fetch@2.6.5, node-fetch@^2.5.0, node-fetch@^2.6.1:
-  version "2.6.5"
-  resolved "https://registry.npmjs.org/node-fetch/-/node-fetch-2.6.5.tgz#42735537d7f080a7e5f78b6c549b7146be1742fd"
-  integrity sha512-mmlIVHJEu5rnIxgEgez6b9GgWXbkZj5YZ7fx+2r94a2E+Uirsp6HsPTPlomfdHtpt/B0cdKviwkoaM6pyvUOpQ==
+node-fetch@2.6.7, node-fetch@^2.5.0, node-fetch@^2.6.1:
+  version "2.6.7"
+  resolved "https://registry.npmjs.org/node-fetch/-/node-fetch-2.6.7.tgz#24de9fba827e3b4ae44dc8b20256a379160052ad"
+  integrity sha512-ZjMPFEfVx5j+y2yF35Kzx5sF7kDzxuDj6ziH4FFbOp87zKDZNx8yExJIb05OGF4Nlt9IHFIMBkRl41VdvcNdbQ==
   dependencies:
     whatwg-url "^5.0.0"