diff --git a/gax/package.json b/gax/package.json
index 828a463ac..558712d7d 100644
--- a/gax/package.json
+++ b/gax/package.json
@@ -16,7 +16,7 @@
     "abort-controller": "^3.0.0",
     "duplexify": "^4.0.0",
     "google-auth-library": "^9.3.0",
-    "node-fetch": "^2.6.1",
+    "node-fetch": "^2.7.0",
     "object-hash": "^3.0.0",
     "proto3-json-serializer": "^2.0.2",
     "retry-request": "^7.0.0",
@@ -30,7 +30,7 @@
     "@types/mocha": "^9.0.0",
     "@types/ncp": "^2.0.1",
     "@types/node": "^20.5.0",
-    "@types/node-fetch": "^2.5.4",
+    "@types/node-fetch": "^2.6.11",
     "@types/object-hash": "^3.0.0",
     "@types/proxyquire": "^1.3.28",
     "@types/pumpify": "^1.4.1",