diff --git a/big-dipper-backend/package.json b/big-dipper-backend/package.json
index ef5a80166f..1956d8f784 100644
--- a/big-dipper-backend/package.json
+++ b/big-dipper-backend/package.json
@@ -31,7 +31,7 @@
     "chart.js": "^3.9.1",
     "cheerio": "^1.0.0-rc.6",
     "connect-route": "^0.1.5",
-    "crypto-js": "^4.1.1",
+    "crypto-js": "^4.2.0",
     "d3": "^7.6.1",
     "doc-head-extract": "^1.0.4",
     "fibers": "^5.0.3",
diff --git a/big-dipper-backend/yarn.lock b/big-dipper-backend/yarn.lock
index 16689dda27..23aa578544 100644
--- a/big-dipper-backend/yarn.lock
+++ b/big-dipper-backend/yarn.lock
@@ -1393,9 +1393,9 @@ crypto-browserify@^3.12.0:
     randombytes "^2.0.0"
     randomfill "^1.0.3"
 
-crypto-js@^4.1.1:
-  version "4.1.1"
-  resolved "https://registry.npmjs.org/crypto-js/-/crypto-js-4.1.1.tgz"
+crypto-js@^4.2.0:
+  version "4.2.0"
+  resolved "https://registry.yarnpkg.com/crypto-js/-/crypto-js-4.2.0.tgz#4d931639ecdfd12ff80e8186dba6af2c2e856631"
 
 css-color-keywords@^1.0.0:
   version "1.0.0"