diff --git a/package.json b/package.json
index d64688c76f..8c6ccef80c 100644
--- a/package.json
+++ b/package.json
@@ -49,7 +49,7 @@
     "paste-html-to-govspeak": "^0.3.0",
     "raven-js": "^3.27.2",
     "url-polyfill": "^1.1.12",
-    "whatwg-fetch": "^3.6.17"
+    "whatwg-fetch": "^3.6.18"
   },
   "resolutions": {
     "stylelint/strip-ansi": "6.0.1",
diff --git a/yarn.lock b/yarn.lock
index ec0134c3c8..3b1486e781 100644
--- a/yarn.lock
+++ b/yarn.lock
@@ -2909,10 +2909,10 @@ vary@~1.1.2:
   resolved "https://registry.yarnpkg.com/vary/-/vary-1.1.2.tgz#2299f02c6ded30d4a5961b0b9f74524a18f634fc"
   integrity sha1-IpnwLG3tMNSllhsLn3RSShj2NPw=
 
-whatwg-fetch@^3.6.17:
-  version "3.6.17"
-  resolved "https://registry.yarnpkg.com/whatwg-fetch/-/whatwg-fetch-3.6.17.tgz#009bbbfc122b227b74ba1ff31536b3a1a0e0e212"
-  integrity sha512-c4ghIvG6th0eudYwKZY5keb81wtFz9/WeAHAoy8+r18kcWlitUIrmGFQ2rWEl4UCKUilD3zCLHOIPheHx5ypRQ==
+whatwg-fetch@^3.6.18:
+  version "3.6.18"
+  resolved "https://registry.yarnpkg.com/whatwg-fetch/-/whatwg-fetch-3.6.18.tgz#2f640cdee315abced7daeaed2309abd1e44e62d4"
+  integrity sha512-ltN7j66EneWn5TFDO4L9inYC1D+Czsxlrw2SalgjMmEMkLfA5SIZxEFdE6QtHFiiM6Q7WL32c7AkI3w6yxM84Q==
 
 which@^1.3.1:
   version "1.3.1"