diff --git a/packages/cli/package.json b/packages/cli/package.json
index dfa43da5e..14c2c6c46 100644
--- a/packages/cli/package.json
+++ b/packages/cli/package.json
@@ -37,7 +37,7 @@
     "@ampproject/toolbox-update-cache": "^2.7.0-alpha.1",
     "minimist": "1.2.5",
     "minimist-options": "4.1.0",
-    "node-fetch": "2.6.0"
+    "node-fetch": "^2.6.1"
   },
   "gitHead": "da4cca026111b917cd3901b4666a5997ef45a606"
 }
diff --git a/packages/lighthouse-plugin-amp/package.json b/packages/lighthouse-plugin-amp/package.json
index 187dfa154..77a4ffcf9 100644
--- a/packages/lighthouse-plugin-amp/package.json
+++ b/packages/lighthouse-plugin-amp/package.json
@@ -8,7 +8,7 @@
   "homepage": "https://github.com/ampproject/amp-toolbox/tree/main/packages/lighthouse-plugin-amp",
   "dependencies": {
     "amphtml-validator": "1.0.33",
-    "node-fetch": "2.6.0"
+    "node-fetch": "^2.6.1"
   },
   "version": "2.7.0-alpha.1",
   "main": "./plugin.js",
diff --git a/packages/linter/package.json b/packages/linter/package.json
index c5a2e95a3..1621b988b 100644
--- a/packages/linter/package.json
+++ b/packages/linter/package.json
@@ -20,7 +20,7 @@
     "commander": "6.0.0",
     "debug": "4.1.1",
     "execa": "4.0.3",
-    "node-fetch": "2.6.0",
+    "node-fetch": "^2.6.1",
     "probe-image-size": "5.0.0",
     "throat": "5.0.0"
   },
diff --git a/packages/optimizer/package.json b/packages/optimizer/package.json
index 87dce73c6..d1339cd23 100644
--- a/packages/optimizer/package.json
+++ b/packages/optimizer/package.json
@@ -34,7 +34,7 @@
     "@ampproject/toolbox-script-csp": "^2.5.4",
     "@ampproject/toolbox-validator-rules": "^2.5.4",
     "abort-controller": "3.0.0",
-    "cross-fetch": "3.0.5",
+    "cross-fetch": "^3.0.6",
     "cssnano-simple": "1.2.0",
     "dom-serializer": "1.0.1",
     "domhandler": "3.0.0",
@@ -42,7 +42,7 @@
     "htmlparser2": "4.1.0",
     "https-proxy-agent": "5.0.0",
     "lru-cache": "6.0.0",
-    "node-fetch": "2.6.0",
+    "node-fetch": "^2.6.1",
     "normalize-html-whitespace": "1.0.0",
     "postcss": "7.0.32",
     "postcss-safe-parser": "4.0.2",
diff --git a/packages/runtime-fetch/package.json b/packages/runtime-fetch/package.json
index d856c85a7..f1be5c252 100644
--- a/packages/runtime-fetch/package.json
+++ b/packages/runtime-fetch/package.json
@@ -24,7 +24,7 @@
     "@ampproject/toolbox-core": "^2.6.0",
     "@ampproject/toolbox-runtime-version": "^2.7.0-alpha.1",
     "at-least-node": "1.0.0",
-    "cross-fetch": "3.0.5",
+    "cross-fetch": "^3.0.6",
     "fs-extra": "9.0.1"
   },
   "bugs": {
diff --git a/packages/validator-rules/package.json b/packages/validator-rules/package.json
index ba79d12fb..3757bd853 100644
--- a/packages/validator-rules/package.json
+++ b/packages/validator-rules/package.json
@@ -24,7 +24,7 @@
     "url": "https://github.com/ampproject/amp-toolbox/issues"
   },
   "dependencies": {
-    "cross-fetch": "3.0.5"
+    "cross-fetch": "^3.0.6"
   },
   "homepage": "https://github.com/ampproject/amp-toolbox/tree/main/packages/validator-rules",
   "directories": {