diff --git a/package.json b/package.json
index 497cfdfc2..3db31d31d 100644
--- a/package.json
+++ b/package.json
@@ -95,7 +95,7 @@
     "ipfs": "0.28.2",
     "ipfs-api": "18.2.0",
     "ipfs-css": "0.2.0",
-    "ipfs-postmsg-proxy": "2.10.0",
+    "ipfs-postmsg-proxy": "2.13.0",
     "is-ipfs": "0.3.2",
     "is-svg": "3.0.0",
     "lru_map": "0.3.3",
diff --git a/yarn.lock b/yarn.lock
index f10a1c523..14b3e4d85 100644
--- a/yarn.lock
+++ b/yarn.lock
@@ -1483,7 +1483,7 @@ cids@^0.5.2, cids@~0.5.1, cids@~0.5.2:
     multicodec "~0.2.3"
     multihashes "~0.4.9"
 
-cids@~0.5.3:
+cids@^0.5.3, cids@~0.5.3:
   version "0.5.3"
   resolved "https://registry.yarnpkg.com/cids/-/cids-0.5.3.tgz#9a25b697eb76faf807afcec35c4ab936edfbd0a4"
   dependencies:
@@ -4146,13 +4146,13 @@ ipfs-multipart@~0.1.0:
     content "^3.0.0"
     dicer "^0.2.5"
 
-ipfs-postmsg-proxy@2.10.0:
-  version "2.10.0"
-  resolved "https://registry.yarnpkg.com/ipfs-postmsg-proxy/-/ipfs-postmsg-proxy-2.10.0.tgz#9260aea31dee68f218153a55f01f2dae40d5bed0"
+ipfs-postmsg-proxy@2.13.0:
+  version "2.13.0"
+  resolved "https://registry.yarnpkg.com/ipfs-postmsg-proxy/-/ipfs-postmsg-proxy-2.13.0.tgz#9f5b3e872060e78d53042ada7968597f96806cab"
   dependencies:
     big.js "^5.0.3"
     callbackify "^1.1.0"
-    cids "^0.5.2"
+    cids "^0.5.3"
     ipfs-block "^0.6.1"
     is-pull-stream "0.0.0"
     is-stream "^1.1.0"
@@ -4163,7 +4163,7 @@ ipfs-postmsg-proxy@2.10.0:
     pull-abortable "^4.1.1"
     pull-defer "^0.2.2"
     pull-postmsg-stream "^1.1.3"
-    pull-stream "^3.6.1"
+    pull-stream "^3.6.7"
     pull-stream-to-stream "^1.3.4"
     shortid "^2.2.8"
     stream-to-pull-stream "^1.7.2"
@@ -7509,6 +7509,10 @@ pull-stream@^3.2.3, pull-stream@^3.4.5, pull-stream@^3.6.0, pull-stream@^3.6.1,
   version "3.6.2"
   resolved "https://registry.yarnpkg.com/pull-stream/-/pull-stream-3.6.2.tgz#1ea14c6f13174e6ac4def0c2a4e76567b7cb0c5c"
 
+pull-stream@^3.6.7:
+  version "3.6.7"
+  resolved "https://registry.yarnpkg.com/pull-stream/-/pull-stream-3.6.7.tgz#fe4ae4f7cc3a9ee3ac82cd5be32729f2f0d5f02b"
+
 pull-stringify@^1.2.2:
   version "1.2.2"
   resolved "https://registry.yarnpkg.com/pull-stringify/-/pull-stringify-1.2.2.tgz#5a1c34e0075faf2f2f6d46004e36dccd33bd7c7c"