diff --git a/Cargo.lock b/Cargo.lock
index 3e37bcfd167e4..b16d8f97de3ad 100644
--- a/Cargo.lock
+++ b/Cargo.lock
@@ -2984,9 +2984,9 @@ dependencies = [
 
 [[package]]
 name = "httparse"
-version = "1.5.1"
+version = "1.7.1"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "acd94fdbe1d4ff688b67b04eee2e17bd50995534a61539e45adfefb45e5e5503"
+checksum = "496ce29bb5a52785b44e0f7ca2847ae0bb839c9bd28f69acac9b99d461c0c04c"
 
 [[package]]
 name = "httpdate"
@@ -3030,9 +3030,9 @@ dependencies = [
 
 [[package]]
 name = "hyper"
-version = "0.14.16"
+version = "0.14.19"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "b7ec3e62bdc98a2f0393a5048e4c30ef659440ea6e0e572965103e72bd836f55"
+checksum = "42dc3c131584288d375f2d07f822b0cb012d8c6fb899a5b9fdb3cb7eb9b6004f"
 dependencies = [
  "bytes 1.1.0",
  "futures-channel",
@@ -3043,7 +3043,7 @@ dependencies = [
  "http-body",
  "httparse",
  "httpdate",
- "itoa 0.4.8",
+ "itoa 1.0.1",
  "pin-project-lite 0.2.6",
  "socket2 0.4.4",
  "tokio",
@@ -3060,7 +3060,7 @@ checksum = "5f9f7a97316d44c0af9b0301e65010573a853a9fc97046d7331d7f6bc0fd5a64"
 dependencies = [
  "ct-logs",
  "futures-util",
- "hyper 0.14.16",
+ "hyper 0.14.19",
  "log 0.4.14",
  "rustls 0.19.1",
  "rustls-native-certs 0.5.0",
@@ -3076,7 +3076,7 @@ source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "d6183ddfa99b85da61a140bea0efc93fdf56ceaa041b37d553518030827f9905"
 dependencies = [
  "bytes 1.1.0",
- "hyper 0.14.16",
+ "hyper 0.14.19",
  "native-tls",
  "tokio",
  "tokio-native-tls",
@@ -3291,7 +3291,7 @@ checksum = "d2b99d4207e2a04fb4581746903c2bb7eb376f88de9c699d0f3e10feeac0cd3a"
 dependencies = [
  "derive_more",
  "futures 0.3.21",
- "hyper 0.14.16",
+ "hyper 0.14.19",
  "hyper-tls",
  "jsonrpc-core",
  "jsonrpc-pubsub",
@@ -3347,7 +3347,7 @@ source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "e1dea6e07251d9ce6a552abfb5d7ad6bc290a4596c8dcc3d795fae2bbdc1f3ff"
 dependencies = [
  "futures 0.3.21",
- "hyper 0.14.16",
+ "hyper 0.14.19",
  "jsonrpc-core",
  "jsonrpc-server-utils",
  "log 0.4.14",
@@ -3464,7 +3464,7 @@ dependencies = [
  "beef",
  "futures-channel",
  "futures-util",
- "hyper 0.14.16",
+ "hyper 0.14.19",
  "jsonrpsee-types",
  "rustc-hash",
  "serde",
@@ -8861,7 +8861,7 @@ dependencies = [
  "futures 0.3.21",
  "futures-timer",
  "hex",
- "hyper 0.14.16",
+ "hyper 0.14.19",
  "hyper-rustls",
  "lazy_static",
  "num_cpus",
@@ -10735,7 +10735,7 @@ name = "substrate-prometheus-endpoint"
 version = "0.10.0-dev"
 dependencies = [
  "futures-util",
- "hyper 0.14.16",
+ "hyper 0.14.19",
  "log 0.4.14",
  "prometheus",
  "thiserror",
diff --git a/client/offchain/Cargo.toml b/client/offchain/Cargo.toml
index 6cb1f83e360be..ac649b6b54caf 100644
--- a/client/offchain/Cargo.toml
+++ b/client/offchain/Cargo.toml
@@ -30,7 +30,7 @@ sp-offchain = { version = "4.0.0-dev", path = "../../primitives/offchain" }
 sp-runtime = { version = "6.0.0", path = "../../primitives/runtime" }
 sc-utils = { version = "4.0.0-dev", path = "../utils" }
 threadpool = "1.7"
-hyper = { version = "0.14.16", features = ["stream", "http2"] }
+hyper = { version = "0.14.19", features = ["stream", "http2"] }
 hyper-rustls = "0.22.1"
 once_cell = "1.8"
 tracing = "0.1.29"
diff --git a/utils/prometheus/Cargo.toml b/utils/prometheus/Cargo.toml
index 4940712f2f4d9..ed03138bd2161 100644
--- a/utils/prometheus/Cargo.toml
+++ b/utils/prometheus/Cargo.toml
@@ -18,8 +18,8 @@ prometheus = { version = "0.13.0", default-features = false }
 futures-util = { version = "0.3.19", default-features = false, features = ["io"] }
 thiserror = "1.0"
 tokio = { version = "1.17.0", features = ["parking_lot"] }
-hyper = { version = "0.14.16", default-features = false, features = ["http1", "server", "tcp"] }
+hyper = { version = "0.14.19", default-features = false, features = ["http1", "server", "tcp"] }
 
 [dev-dependencies]
-hyper = { version = "0.14.16", features = ["client"] }
+hyper = { version = "0.14.19", features = ["client"] }
 tokio = { version = "1.17.0", features = ["rt-multi-thread"] }