diff --git a/CHANGES b/CHANGES
index da9256960..eca6de8c8 100644
--- a/CHANGES
+++ b/CHANGES
@@ -2407,3 +2407,5 @@
 * remove support for manifest version 1
 * Add option to enable/disable mailbox sharing
 * base image 3.1.0
+* Update node to 16.13.1
+
diff --git a/baseimage/initializeBaseUbuntuImage.sh b/baseimage/initializeBaseUbuntuImage.sh
index 5a17926da..a09afccf4 100755
--- a/baseimage/initializeBaseUbuntuImage.sh
+++ b/baseimage/initializeBaseUbuntuImage.sh
@@ -76,7 +76,7 @@ apt-get -o Dpkg::Options::="--force-confold" install -y --no-install-recommends
 cp /usr/share/unattended-upgrades/20auto-upgrades /etc/apt/apt.conf.d/20auto-upgrades
 
 echo "==> Installing node.js"
-readonly node_version=14.17.6
+readonly node_version=16.13.1
 mkdir -p /usr/local/node-${node_version}
 curl -sL https://nodejs.org/dist/v${node_version}/node-v${node_version}-linux-x64.tar.gz | tar zxf - --strip-components=1 -C /usr/local/node-${node_version}
 ln -sf /usr/local/node-${node_version}/bin/node /usr/bin/node
diff --git a/scripts/installer.sh b/scripts/installer.sh
index 6a676ac24..70e2aa492 100755
--- a/scripts/installer.sh
+++ b/scripts/installer.sh
@@ -115,13 +115,13 @@ if ! which sshfs; then
 fi
 
 log "updating node"
-readonly node_version=14.17.6
+readonly node_version=16.13.1
 if [[ "$(node --version)" != "v${node_version}" ]]; then
     mkdir -p /usr/local/node-${node_version}
     $curl -sL https://nodejs.org/dist/v${node_version}/node-v${node_version}-linux-x64.tar.gz | tar zxvf - --strip-components=1 -C /usr/local/node-${node_version}
     ln -sf /usr/local/node-${node_version}/bin/node /usr/bin/node
     ln -sf /usr/local/node-${node_version}/bin/npm /usr/bin/npm
-    rm -rf /usr/local/node-14.15.4
+    rm -rf /usr/local/node-14.17.6
 fi
 
 # this is here (and not in updater.js) because rebuild requires the above node