diff --git a/Cargo.lock b/Cargo.lock
index ec5c5267142a9..15c1058eb2e06 100644
--- a/Cargo.lock
+++ b/Cargo.lock
@@ -2899,9 +2899,9 @@ dependencies = [
 
 [[package]]
 name = "httparse"
-version = "1.5.1"
+version = "1.7.1"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "acd94fdbe1d4ff688b67b04eee2e17bd50995534a61539e45adfefb45e5e5503"
+checksum = "496ce29bb5a52785b44e0f7ca2847ae0bb839c9bd28f69acac9b99d461c0c04c"
 
 [[package]]
 name = "httpdate"
@@ -2917,9 +2917,9 @@ checksum = "9a3a5bfb195931eeb336b2a7b4d761daec841b97f947d34394601737a7bba5e4"
 
 [[package]]
 name = "hyper"
-version = "0.14.16"
+version = "0.14.20"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "b7ec3e62bdc98a2f0393a5048e4c30ef659440ea6e0e572965103e72bd836f55"
+checksum = "02c929dc5c39e335a03c405292728118860721b10190d98c2a0f0efd5baafbac"
 dependencies = [
  "bytes",
  "futures-channel",
@@ -2930,7 +2930,7 @@ dependencies = [
  "http-body",
  "httparse",
  "httpdate",
- "itoa 0.4.8",
+ "itoa 1.0.1",
  "pin-project-lite 0.2.6",
  "socket2",
  "tokio",
diff --git a/client/offchain/Cargo.toml b/client/offchain/Cargo.toml
index 8da2d4be3adde..0a12de95e041d 100644
--- a/client/offchain/Cargo.toml
+++ b/client/offchain/Cargo.toml
@@ -19,7 +19,7 @@ fnv = "1.0.6"
 futures = "0.3.21"
 futures-timer = "3.0.2"
 hex = "0.4"
-hyper = { version = "0.14.16", features = ["stream", "http2"] }
+hyper = { version = "0.14.20", features = ["stream", "http2"] }
 hyper-rustls = { version = "0.23.0", features = ["http2"] }
 num_cpus = "1.13"
 once_cell = "1.8"
diff --git a/utils/prometheus/Cargo.toml b/utils/prometheus/Cargo.toml
index 3c2f8321befbe..60c91c76947b3 100644
--- a/utils/prometheus/Cargo.toml
+++ b/utils/prometheus/Cargo.toml
@@ -14,12 +14,12 @@ targets = ["x86_64-unknown-linux-gnu"]
 
 [dependencies]
 futures-util = { version = "0.3.19", default-features = false, features = ["io"] }
-hyper = { version = "0.14.16", default-features = false, features = ["http1", "server", "tcp"] }
+hyper = { version = "0.14.20", default-features = false, features = ["http1", "server", "tcp"] }
 log = "0.4.17"
 prometheus = { version = "0.13.0", default-features = false }
 thiserror = "1.0"
 tokio = { version = "1.17.0", features = ["parking_lot"] }
 
 [dev-dependencies]
-hyper = { version = "0.14.16", features = ["client"] }
+hyper = { version = "0.14.20", features = ["client"] }
 tokio = { version = "1.17.0", features = ["rt-multi-thread"] }