diff --git a/package-lock.json b/package-lock.json
index 75c8944c42..36eb884226 100644
--- a/package-lock.json
+++ b/package-lock.json
@@ -20842,9 +20842,9 @@
       }
     },
     "node_modules/crypto-js": {
-      "version": "3.3.0",
-      "resolved": "https://registry.npmjs.org/crypto-js/-/crypto-js-3.3.0.tgz",
-      "integrity": "sha512-DIT51nX0dCfKltpRiXV+/TVZq+Qq2NgF4644+K7Ttnla7zEzqc+kjJyiB96BHNyUTBxyjzRcZYpUdZa+QAqi6Q==",
+      "version": "4.2.0",
+      "resolved": "https://registry.npmjs.org/crypto-js/-/crypto-js-4.2.0.tgz",
+      "integrity": "sha512-KALDyEYgpY+Rlob/iriUtjV6d5Eq+Y191A5g4UqLAi8CyGP9N1+FdVbkc1SxKc2r4YAYqG8JzO2KGL+AizD70Q==",
       "dev": true
     },
     "node_modules/crypto-random-string": {
@@ -46689,7 +46689,7 @@
         "cheerio": "^1.0.0-rc.3",
         "classnames": "^2.2.6",
         "copy-webpack-plugin": "^11.0.0",
-        "crypto-js": "^3.1.9-1",
+        "crypto-js": "^4.2.0",
         "css-loader": "^6.8.1",
         "css-minimizer-webpack-plugin": "^5.0.1",
         "cypress": "13.3.3",
@@ -55468,7 +55468,7 @@
         "copy-webpack-plugin": "^11.0.0",
         "core-js": "^3.30.2",
         "crc-32": "^1.2.2",
-        "crypto-js": "^3.1.9-1",
+        "crypto-js": "^4.2.0",
         "css-loader": "^6.8.1",
         "css-minimizer-webpack-plugin": "^5.0.1",
         "csurf": "^1.11.0",
@@ -65631,9 +65631,9 @@
       }
     },
     "crypto-js": {
-      "version": "3.3.0",
-      "resolved": "https://registry.npmjs.org/crypto-js/-/crypto-js-3.3.0.tgz",
-      "integrity": "sha512-DIT51nX0dCfKltpRiXV+/TVZq+Qq2NgF4644+K7Ttnla7zEzqc+kjJyiB96BHNyUTBxyjzRcZYpUdZa+QAqi6Q==",
+      "version": "4.2.0",
+      "resolved": "https://registry.npmjs.org/crypto-js/-/crypto-js-4.2.0.tgz",
+      "integrity": "sha512-KALDyEYgpY+Rlob/iriUtjV6d5Eq+Y191A5g4UqLAi8CyGP9N1+FdVbkc1SxKc2r4YAYqG8JzO2KGL+AizD70Q==",
       "dev": true
     },
     "crypto-random-string": {
diff --git a/services/web/package.json b/services/web/package.json
index 8474c54a30..5d1c02f870 100644
--- a/services/web/package.json
+++ b/services/web/package.json
@@ -273,7 +273,7 @@
     "cheerio": "^1.0.0-rc.3",
     "classnames": "^2.2.6",
     "copy-webpack-plugin": "^11.0.0",
-    "crypto-js": "^3.1.9-1",
+    "crypto-js": "^4.2.0",
     "css-loader": "^6.8.1",
     "css-minimizer-webpack-plugin": "^5.0.1",
     "cypress": "13.3.3",