diff --git a/packages/app/package.json b/packages/app/package.json
index 36b811c27d..4d7e7d9a62 100644
--- a/packages/app/package.json
+++ b/packages/app/package.json
@@ -56,8 +56,8 @@
     "@roadiehq/backstage-plugin-travis-ci": "^1.0.11",
     "history": "^5.0.0",
     "prop-types": "^15.7.2",
-    "react": "^16.12.0",
-    "react-dom": "^16.12.0",
+    "react": "^16.13.1",
+    "react-dom": "^16.13.1",
     "react-hot-loader": "^4.12.21",
     "react-router": "6.0.0-beta.0",
     "react-router-dom": "6.0.0-beta.0",
diff --git a/packages/cli/package.json b/packages/cli/package.json
index fe8a529de1..0a6b2b934a 100644
--- a/packages/cli/package.json
+++ b/packages/cli/package.json
@@ -89,7 +89,6 @@
     "ora": "^5.3.0",
     "postcss": "^8.1.0",
     "process": "^0.11.10",
-    "react": "^16.0.0",
     "react-dev-utils": "^12.0.0-next.47",
     "react-hot-loader": "^4.12.21",
     "recursive-readdir": "^2.2.2",
diff --git a/packages/storybook/package.json b/packages/storybook/package.json
index 736afbb8d8..5df0c06632 100644
--- a/packages/storybook/package.json
+++ b/packages/storybook/package.json
@@ -9,8 +9,8 @@
   },
   "dependencies": {
     "@backstage/theme": "^0.2.0",
-    "react": "^16.12.0",
-    "react-dom": "^16.12.0"
+    "react": "^16.13.1",
+    "react-dom": "^16.13.1"
   },
   "devDependencies": {
     "@storybook/addon-a11y": "^6.3.4",
diff --git a/yarn.lock b/yarn.lock
index 35059f4b70..a71567ffe8 100644
--- a/yarn.lock
+++ b/yarn.lock
@@ -8096,7 +8096,7 @@
   dependencies:
     "@types/react" "*"
 
-"@types/react@*", "@types/react@>=16.9.0":
+"@types/react@*", "@types/react@>=16.9.0", "@types/react@^16.13.1 || ^17.0.0":
   version "16.14.18"
   resolved "https://registry.npmjs.org/@types/react/-/react-16.14.18.tgz#b2bcea05ee244fde92d409f91bd888ca8e54b20f"
   integrity sha512-eeyqd1mqoG43mI0TvNKy9QNf1Tjz3DEOsRP3rlPo35OeMIt05I+v9RR8ZvL2GuYZeF2WAcLXJZMzu6zdz3VbtQ==
@@ -24819,7 +24819,7 @@ react-virtualized@^9.21.0:
     prop-types "^15.6.0"
     react-lifecycles-compat "^3.0.4"
 
-react@^16.0.0, react@^16.12.0, react@^16.13.1:
+react@^16.12.0, react@^16.13.1:
   version "16.13.1"
   resolved "https://registry.npmjs.org/react/-/react-16.13.1.tgz#2e818822f1a9743122c063d6410d85c1e3afe48e"
   integrity sha512-YMZQQq32xHLX0bz5Mnibv1/LHb3Sqzngu7xstSM+vrkE5Kzr9xE0yMByK5kMoTK30YVJE61WfbxIFFvfeDKT1w==