diff --git a/Cargo.lock b/Cargo.lock
index 3f2654166e..6052d7f053 100644
--- a/Cargo.lock
+++ b/Cargo.lock
@@ -1439,7 +1439,7 @@ dependencies = [
  "errors",
  "hmac 0.10.1",
  "jwt",
- "sha2 0.9.5",
+ "sha2 0.10.5",
 ]
 
 [[package]]
@@ -3158,7 +3158,7 @@ dependencies = [
  "hmac 0.10.1",
  "serde",
  "serde_json",
- "sha2 0.9.5",
+ "sha2 0.9.9",
 ]
 
 [[package]]
@@ -3362,7 +3362,7 @@ dependencies = [
  "des",
  "digest 0.9.0",
  "md-5",
- "sha2 0.9.5",
+ "sha2 0.9.9",
  "tiger",
 ]
 
@@ -5151,13 +5151,13 @@ dependencies = [
 
 [[package]]
 name = "sha2"
-version = "0.9.5"
+version = "0.9.9"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "b362ae5752fd2137731f9fa25fd4d9058af34666ca1966fb969119cc35719f12"
+checksum = "4d58a1e1bf39749807d89cf2d98ac2dfa0ff1cb3faa38fbb64dd88ac8013d800"
 dependencies = [
  "block-buffer 0.9.0",
  "cfg-if 1.0.0",
- "cpufeatures 0.1.1",
+ "cpufeatures 0.2.5",
  "digest 0.9.0",
  "opaque-debug",
 ]
@@ -5562,7 +5562,7 @@ dependencies = [
  "serde",
  "serde_derive",
  "serde_json",
- "sha2 0.9.5",
+ "sha2 0.10.5",
  "speculoos",
  "sqlx",
  "subprocess",
@@ -6623,7 +6623,7 @@ dependencies = [
  "serde",
  "serde_derive",
  "serde_json",
- "sha2 0.9.5",
+ "sha2 0.10.5",
  "sqlx",
  "time 0.2.26",
  "tokio 1.25.0",
@@ -6857,7 +6857,7 @@ dependencies = [
  "serde",
  "serde_derive",
  "serde_json",
- "sha2 0.9.5",
+ "sha2 0.10.5",
  "sqlx",
  "sqlx_mysql_helpers",
  "time 0.2.26",
@@ -7192,7 +7192,7 @@ dependencies = [
  "serde",
  "serde_derive",
  "serde_json",
- "sha2 0.9.5",
+ "sha2 0.10.5",
  "sqlx",
  "time 0.2.26",
  "tokio 1.25.0",
diff --git a/crates/lib/cookies/Cargo.toml b/crates/lib/cookies/Cargo.toml
index 6f9678ec57..80b38759c4 100644
--- a/crates/lib/cookies/Cargo.toml
+++ b/crates/lib/cookies/Cargo.toml
@@ -20,7 +20,7 @@ errors = { path = "../errors" }
 # External
 hmac = "0.10.0" # jwt signing
 jwt = "0.13.0"
-sha2 = "0.9.5" # hmac signing
+sha2 = "0.10.5" # hmac signing
 
 [dev-dependencies]
 # None yet
diff --git a/crates/service/other/twitch_pubsub_subscriber/Cargo.toml b/crates/service/other/twitch_pubsub_subscriber/Cargo.toml
index b4624f80e3..053647594f 100644
--- a/crates/service/other/twitch_pubsub_subscriber/Cargo.toml
+++ b/crates/service/other/twitch_pubsub_subscriber/Cargo.toml
@@ -99,7 +99,7 @@ bcrypt = "0.8" # password hashes
 hmac = "0.10.0" # cookies
 magic-crypt = "3.1.8" # encrypting sort IDs for the frontend so we don't leak info
 md-5 = "0.9.1" # gravatar
-sha2 = "0.9.5" # file hashes, inference text hashes, etc.
+sha2 = "0.10.5" # file hashes, inference text hashes, etc.
 
 # Serialization
 serde = "1.0.125"
diff --git a/crates/service/plugins/users/Cargo.toml b/crates/service/plugins/users/Cargo.toml
index 98e3e88b6a..39f7e37d89 100644
--- a/crates/service/plugins/users/Cargo.toml
+++ b/crates/service/plugins/users/Cargo.toml
@@ -47,7 +47,7 @@ jwt = "0.13.0"
 bcrypt = "0.8" # password hashes
 hmac = "0.10.0" # cookies
 md-5 = "0.9.1" # gravatar
-sha2 = "0.9.5" # file hashes, inference text hashes, etc.
+sha2 = "0.10.5" # file hashes, inference text hashes, etc.
 
 # Serialization
 serde = "1.0.125"
diff --git a/crates/service/web/storyteller_web/Cargo.toml b/crates/service/web/storyteller_web/Cargo.toml
index 7e6edd01ae..c579484326 100644
--- a/crates/service/web/storyteller_web/Cargo.toml
+++ b/crates/service/web/storyteller_web/Cargo.toml
@@ -147,7 +147,7 @@ bcrypt = "0.8" # password hashes
 hmac = "0.10.0" # cookies
 magic-crypt = "3.1.8" # encrypting sort IDs for the frontend so we don't leak info
 md-5 = "0.9.1" # gravatar
-sha2 = "0.9.5" # file hashes, inference text hashes, etc.
+sha2 = "0.10.5" # file hashes, inference text hashes, etc.
 
 # Serialization
 serde = "1.0.125"
diff --git a/crates/service/web/websocket_gateway/Cargo.toml b/crates/service/web/websocket_gateway/Cargo.toml
index d3463c194a..022c82d757 100644
--- a/crates/service/web/websocket_gateway/Cargo.toml
+++ b/crates/service/web/websocket_gateway/Cargo.toml
@@ -100,7 +100,7 @@ bcrypt = "0.8" # password hashes
 hmac = "0.10.0" # cookies
 magic-crypt = "3.1.8" # encrypting sort IDs for the frontend so we don't leak info
 md-5 = "0.9.1" # gravatar
-sha2 = "0.9.5" # file hashes, inference text hashes, etc.
+sha2 = "0.10.5" # file hashes, inference text hashes, etc.
 
 # Serialization
 serde = "1.0.125"