diff --git a/cluster/addons/calico-policy-controller/calico-node-daemonset.yaml b/cluster/addons/calico-policy-controller/calico-node-daemonset.yaml
index bb1479e18b8..3c9a3143e4f 100644
--- a/cluster/addons/calico-policy-controller/calico-node-daemonset.yaml
+++ b/cluster/addons/calico-policy-controller/calico-node-daemonset.yaml
@@ -27,7 +27,7 @@ spec:
       terminationGracePeriodSeconds: 0
       initContainers:
         - name: install-cni
-          image: gcr.io/projectcalico-org/cni:v3.16.2
+          image: gcr.io/projectcalico-org/cni:v3.19.1
           command: ["/opt/cni/bin/install"]
           env:
             - name: CNI_CONF_NAME
@@ -78,7 +78,7 @@ spec:
         # container programs network policy and routes on each
         # host.
         - name: calico-node
-          image: gcr.io/projectcalico-org/node:v3.16.2
+          image: gcr.io/projectcalico-org/node:v3.19.1
           env:
             - name: CALICO_MANAGE_CNI
               value: "true"
diff --git a/cluster/addons/calico-policy-controller/typha-deployment.yaml b/cluster/addons/calico-policy-controller/typha-deployment.yaml
index c42ca5faf35..bc31e4b2309 100644
--- a/cluster/addons/calico-policy-controller/typha-deployment.yaml
+++ b/cluster/addons/calico-policy-controller/typha-deployment.yaml
@@ -23,7 +23,7 @@ spec:
       hostNetwork: true
       serviceAccountName: calico
       containers:
-      - image: gcr.io/projectcalico-org/typha:v3.16.2
+      - image: gcr.io/projectcalico-org/typha:v3.19.1
         name: calico-typha
         ports:
         - containerPort: 5473