diff --git a/package-lock.json b/package-lock.json
index b1fd488..e4ecb62 100644
--- a/package-lock.json
+++ b/package-lock.json
@@ -3469,7 +3469,7 @@
 				"raphael": {
 					"version": "2.1.4",
 					"resolved": "https://registry.npmjs.org/raphael/-/raphael-2.1.4.tgz",
-					"integrity": "sha1-sJymZK0Ei4FLsv9dTR51g4yrnJc=",
+					"integrity": "sha512-5BVQZldxEGZM9htvUBhO1erclzs/qPA55lwIFBgB1o+pMtzwvyDGdv5INN7dH0kJOc3d1IlqHlzgvyvTjc4g1Q==",
 					"dev": true,
 					"requires": {
 						"eve": "git://github.com/adobe-webplatform/eve.git#eef80ed"
@@ -4058,9 +4058,12 @@
 			}
 		},
 		"node-fetch": {
-			"version": "2.6.0",
-			"resolved": "https://registry.npmjs.org/node-fetch/-/node-fetch-2.6.0.tgz",
-			"integrity": "sha512-8dG4H5ujfvFiqDmVu9fQ5bOHUC15JMjMY/Zumv26oOvvVJjM67KF8koCWIabKQ1GJIa9r2mMZscBq/TbdOcmNA=="
+			"version": "2.6.7",
+			"resolved": "https://registry.npmjs.org/node-fetch/-/node-fetch-2.6.7.tgz",
+			"integrity": "sha512-ZjMPFEfVx5j+y2yF35Kzx5sF7kDzxuDj6ziH4FFbOp87zKDZNx8yExJIb05OGF4Nlt9IHFIMBkRl41VdvcNdbQ==",
+			"requires": {
+				"whatwg-url": "^5.0.0"
+			}
 		},
 		"node-libs-browser": {
 			"version": "2.2.1",
@@ -5495,6 +5498,11 @@
 				}
 			}
 		},
+		"tr46": {
+			"version": "0.0.3",
+			"resolved": "https://registry.npmjs.org/tr46/-/tr46-0.0.3.tgz",
+			"integrity": "sha512-N3WMsuqV66lT30CrXNbEjx4GEwlow3v6rr4mCcv6prnfwhS01rkgyFdjPNBYd9br7LpXV1+Emh01fHnq2Gdgrw=="
+		},
 		"try-catch": {
 			"version": "2.0.1",
 			"resolved": "https://registry.npmjs.org/try-catch/-/try-catch-2.0.1.tgz",
@@ -5658,7 +5666,7 @@
 		"underscore": {
 			"version": "1.4.4",
 			"resolved": "https://registry.npmjs.org/underscore/-/underscore-1.4.4.tgz",
-			"integrity": "sha1-YaajIBBiKvoHljvzJSA88SI51gQ=",
+			"integrity": "sha512-ZqGrAgaqqZM7LGRzNjLnw5elevWb5M8LEoDMadxIW3OWbcv72wMMgKdwOKpd5Fqxe8choLD8HN3iSj3TUh/giQ==",
 			"dev": true
 		},
 		"union-value": {
@@ -5854,6 +5862,11 @@
 				"neo-async": "^2.5.0"
 			}
 		},
+		"webidl-conversions": {
+			"version": "3.0.1",
+			"resolved": "https://registry.npmjs.org/webidl-conversions/-/webidl-conversions-3.0.1.tgz",
+			"integrity": "sha512-2JAn3z8AR6rjK8Sm8orRC0h/bcl/DqL7tRPdGZ4I1CjdF+EaMLmYxBHyXuKL849eucPFhvBoxMsflfOb8kxaeQ=="
+		},
 		"webpack": {
 			"version": "4.37.0",
 			"resolved": "https://registry.npmjs.org/webpack/-/webpack-4.37.0.tgz",
@@ -6010,6 +6023,15 @@
 				}
 			}
 		},
+		"whatwg-url": {
+			"version": "5.0.0",
+			"resolved": "https://registry.npmjs.org/whatwg-url/-/whatwg-url-5.0.0.tgz",
+			"integrity": "sha512-saE57nupxk6v3HY35+jzBwYa0rKSy0XR8JSxZPwgLr7ys0IBzhGviA1/TUGJLmSVqs8pb9AnvICXEuOHLprYTw==",
+			"requires": {
+				"tr46": "~0.0.3",
+				"webidl-conversions": "^3.0.0"
+			}
+		},
 		"which": {
 			"version": "1.3.1",
 			"resolved": "https://registry.npmjs.org/which/-/which-1.3.1.tgz",
diff --git a/package.json b/package.json
index 809b6b9..e84496a 100644
--- a/package.json
+++ b/package.json
@@ -242,7 +242,7 @@
 		"mathjax": "^3.0.1",
 		"mathjax-full": "^3.0.1",
 		"mobx": "^5.15.4",
-		"node-fetch": "^2.6.0",
+		"node-fetch": "^2.6.7",
 		"string": "git+ssh://git@github.com/hackmdio/string.js.git#a68176b3d"
 	}
 }