diff --git a/package-lock.json b/package-lock.json
index 23ea2e9c00..00909784e8 100644
--- a/package-lock.json
+++ b/package-lock.json
@@ -97,7 +97,7 @@
 				"regenerator-runtime": "0.13.11",
 				"tslib": "2.6.0",
 				"underscore": "1.13.6",
-				"whatwg-fetch": "3.6.2",
+				"whatwg-fetch": "3.6.17",
 				"wicg-inert": "3.1.2"
 			},
 			"devDependencies": {
@@ -30744,9 +30744,9 @@
 			}
 		},
 		"node_modules/whatwg-fetch": {
-			"version": "3.6.2",
-			"resolved": "https://registry.npmjs.org/whatwg-fetch/-/whatwg-fetch-3.6.2.tgz",
-			"integrity": "sha512-bJlen0FcuU/0EMLrdbJ7zOnW6ITZLrZMIarMUVmdKtsGvZna8vxKYaexICWPfZ8qwf9fzNq+UEIZrnSaApt6RA=="
+			"version": "3.6.17",
+			"resolved": "https://registry.npmjs.org/whatwg-fetch/-/whatwg-fetch-3.6.17.tgz",
+			"integrity": "sha512-c4ghIvG6th0eudYwKZY5keb81wtFz9/WeAHAoy8+r18kcWlitUIrmGFQ2rWEl4UCKUilD3zCLHOIPheHx5ypRQ=="
 		},
 		"node_modules/whatwg-mimetype": {
 			"version": "3.0.0",
diff --git a/package.json b/package.json
index 3d8a55baa2..7341fba4cd 100644
--- a/package.json
+++ b/package.json
@@ -164,7 +164,7 @@
 		"regenerator-runtime": "0.13.11",
 		"tslib": "2.6.0",
 		"underscore": "1.13.6",
-		"whatwg-fetch": "3.6.2",
+		"whatwg-fetch": "3.6.17",
 		"wicg-inert": "3.1.2"
 	},
 	"scripts": {
diff --git a/src/wp-includes/script-loader.php b/src/wp-includes/script-loader.php
index 3447c46016..16c6699a20 100644
--- a/src/wp-includes/script-loader.php
+++ b/src/wp-includes/script-loader.php
@@ -111,7 +111,7 @@ function wp_default_packages_vendor( $scripts ) {
 		'regenerator-runtime'         => '0.13.11',
 		'moment'                      => '2.29.4',
 		'lodash'                      => '4.17.19',
-		'wp-polyfill-fetch'           => '3.6.2',
+		'wp-polyfill-fetch'           => '3.6.17',
 		'wp-polyfill-formdata'        => '4.0.10',
 		'wp-polyfill-node-contains'   => '4.6.0',
 		'wp-polyfill-url'             => '3.6.4',