diff --git a/packages/data-graph-worker/package.json b/packages/data-graph-worker/package.json
index 219f24e2..dde5ac7c 100644
--- a/packages/data-graph-worker/package.json
+++ b/packages/data-graph-worker/package.json
@@ -31,7 +31,7 @@
     "type-check": "tsc --noEmit"
   },
   "dependencies": {
-    "crypto-js": "^4.1.1",
+    "crypto-js": "^4.2.0",
     "localforage": "^1.10.0"
   }
 }
diff --git a/pnpm-lock.yaml b/pnpm-lock.yaml
index 144bf28e..6a62c6e1 100644
--- a/pnpm-lock.yaml
+++ b/pnpm-lock.yaml
@@ -471,8 +471,8 @@ importers:
   packages/data-graph-worker:
     dependencies:
       crypto-js:
-        specifier: ^4.1.1
-        version: 4.1.1
+        specifier: ^4.2.0
+        version: 4.2.0
       localforage:
         specifier: ^1.10.0
         version: 1.10.0
@@ -8892,8 +8892,8 @@ packages:
       shebang-command: 2.0.0
       which: 2.0.2
 
-  /crypto-js@4.1.1:
-    resolution: {integrity: sha512-o2JlM7ydqd3Qk9CA0L4NL6mTzU2sdx96a+oOfPu8Mkl/PK51vSyoi8/rQ8NknZtk44vq15lmhAj9CIAGwgeWKw==}
+  /crypto-js@4.2.0:
+    resolution: {integrity: sha512-KALDyEYgpY+Rlob/iriUtjV6d5Eq+Y191A5g4UqLAi8CyGP9N1+FdVbkc1SxKc2r4YAYqG8JzO2KGL+AizD70Q==}
     dev: false
 
   /crypto-random-string@2.0.0: