diff --git a/.changeset/fresh-fans-raise.md b/.changeset/fresh-fans-raise.md
new file mode 100644
index 000000000..8443ec9a0
--- /dev/null
+++ b/.changeset/fresh-fans-raise.md
@@ -0,0 +1,6 @@
+---
+"@commercetools/sdk-auth": patch
+"@commercetools/sdk-middleware-http": patch
+---
+
+chore(deps): pin dependency node-fetch to 2.7.0
diff --git a/packages/sdk-auth/package.json b/packages/sdk-auth/package.json
index 21c256651..e3a550078 100644
--- a/packages/sdk-auth/package.json
+++ b/packages/sdk-auth/package.json
@@ -44,6 +44,6 @@
   },
   "devDependencies": {
     "nock": "12.0.3",
-    "node-fetch": "^2.6.7"
+    "node-fetch": "2.7.0"
   }
 }
diff --git a/packages/sdk-middleware-http/package.json b/packages/sdk-middleware-http/package.json
index e9c6af500..2229b2569 100644
--- a/packages/sdk-middleware-http/package.json
+++ b/packages/sdk-middleware-http/package.json
@@ -41,6 +41,6 @@
   "devDependencies": {
     "abort-controller": "3.0.0",
     "nock": "12.0.3",
-    "node-fetch": "^2.6.7"
+    "node-fetch": "2.7.0"
   }
 }
diff --git a/pnpm-lock.yaml b/pnpm-lock.yaml
index 66989be14..6e751d01f 100644
--- a/pnpm-lock.yaml
+++ b/pnpm-lock.yaml
@@ -354,7 +354,7 @@ importers:
         specifier: 12.0.3
         version: 12.0.3
       node-fetch:
-        specifier: ^2.6.7
+        specifier: 2.7.0
         version: 2.7.0(encoding@0.1.13)
 
   packages/sdk-client: {}
@@ -386,7 +386,7 @@ importers:
         specifier: 12.0.3
         version: 12.0.3
       node-fetch:
-        specifier: ^2.6.7
+        specifier: 2.7.0
         version: 2.7.0(encoding@0.1.13)
 
   packages/sdk-middleware-logger: {}
@@ -7508,7 +7508,11 @@ snapshots:
       jest-runner: 26.6.3
       jest-runtime: 26.6.3
     transitivePeerDependencies:
+      - bufferutil
+      - canvas
       - supports-color
+      - ts-node
+      - utf-8-validate
 
   '@jest/transform@26.6.2':
     dependencies:
@@ -10593,11 +10597,7 @@ snapshots:
       pretty-format: 26.6.2
       throat: 5.0.0
     transitivePeerDependencies:
-      - bufferutil
-      - canvas
       - supports-color
-      - ts-node
-      - utf-8-validate
 
   jest-leak-detector@26.6.2:
     dependencies: