diff --git a/server/cn/home/dans/dplayer/package.json b/server/cn/home/dans/dplayer/package.json
index 6637e31..0f2d3bc 100644
--- a/server/cn/home/dans/dplayer/package.json
+++ b/server/cn/home/dans/dplayer/package.json
@@ -16,7 +16,7 @@
     "koa-bodyparser": "4.2.1",
     "koa-router": "7.4.0",
     "mongoose": "5.1.7",
-    "node-fetch": "2.1.2",
+    "node-fetch": "2.6.7",
     "redis": "2.8.0",
     "winston": "3.0.0",
     "xml2js": "0.4.19"
diff --git a/server/cn/home/dans/dplayer/yarn.lock b/server/cn/home/dans/dplayer/yarn.lock
index 9945bcb..87e21ed 100644
--- a/server/cn/home/dans/dplayer/yarn.lock
+++ b/server/cn/home/dans/dplayer/yarn.lock
@@ -1053,9 +1053,11 @@ nice-try@^1.0.4:
   version "1.0.4"
   resolved "https://registry.npmjs.org/nice-try/-/nice-try-1.0.4.tgz#d93962f6c52f2c1558c0fbda6d512819f1efe1c4"
 
-node-fetch@2.1.2:
-  version "2.1.2"
-  resolved "https://registry.npmjs.org/node-fetch/-/node-fetch-2.1.2.tgz#ab884e8e7e57e38a944753cec706f788d1768bb5"
+node-fetch@2.6.7:
+  version "2.6.7"
+  resolved "https://registry.yarnpkg.com/node-fetch/-/node-fetch-2.6.7.tgz#24de9fba827e3b4ae44dc8b20256a379160052ad"
+  dependencies:
+    whatwg-url "^5.0.0"
 
 nth-check@~1.0.1:
   version "1.0.1"
@@ -1422,6 +1424,10 @@ tmp@^0.0.33:
   dependencies:
     os-tmpdir "~1.0.2"
 
+tr46@~0.0.3:
+  version "0.0.3"
+  resolved "https://registry.yarnpkg.com/tr46/-/tr46-0.0.3.tgz#8184fd347dac9cdc185992f3a6622e14b9d9ab6a"
+
 triple-beam@^1.2.0, triple-beam@^1.3.0:
   version "1.3.0"
   resolved "https://registry.npmjs.org/triple-beam/-/triple-beam-1.3.0.tgz#a595214c7298db8339eeeee083e4d10bd8cb8dd9"
@@ -1461,6 +1467,17 @@ vary@^1.0.0:
   version "1.1.2"
   resolved "https://registry.npmjs.org/vary/-/vary-1.1.2.tgz#2299f02c6ded30d4a5961b0b9f74524a18f634fc"
 
+webidl-conversions@^3.0.0:
+  version "3.0.1"
+  resolved "https://registry.yarnpkg.com/webidl-conversions/-/webidl-conversions-3.0.1.tgz#24534275e2a7bc6be7bc86611cc16ae0a5654871"
+
+whatwg-url@^5.0.0:
+  version "5.0.0"
+  resolved "https://registry.yarnpkg.com/whatwg-url/-/whatwg-url-5.0.0.tgz#966454e8765462e37644d3626f6742ce8b70965d"
+  dependencies:
+    tr46 "~0.0.3"
+    webidl-conversions "^3.0.0"
+
 which@^1.2.9:
   version "1.3.1"
   resolved "https://registry.npmjs.org/which/-/which-1.3.1.tgz#a45043d54f5805316da8d62f9f50918d3da70b0a"