diff --git a/backend/package.json b/backend/package.json
index 7f4b876d..2dbc3f33 100644
--- a/backend/package.json
+++ b/backend/package.json
@@ -55,7 +55,7 @@
     "connect-redis": "6.1.3",
     "cookie-parser": "^1.4.6",
     "copyfiles": "2.4.1",
-    "crypto-js": "4.1.1",
+    "crypto-js": "4.2.0",
     "date-fns": "2.30.0",
     "dotenv": "16.3.1",
     "eslint": "8.45.0",
diff --git a/backend/yarn.lock b/backend/yarn.lock
index 47c8cf48..eebf50a2 100644
--- a/backend/yarn.lock
+++ b/backend/yarn.lock
@@ -1939,10 +1939,10 @@ cross-spawn@^7.0.0, cross-spawn@^7.0.2, cross-spawn@^7.0.3:
     shebang-command "^2.0.0"
     which "^2.0.1"
 
-crypto-js@4.1.1:
-  version "4.1.1"
-  resolved "https://registry.yarnpkg.com/crypto-js/-/crypto-js-4.1.1.tgz#9e485bcf03521041bd85844786b83fb7619736cf"
-  integrity sha512-o2JlM7ydqd3Qk9CA0L4NL6mTzU2sdx96a+oOfPu8Mkl/PK51vSyoi8/rQ8NknZtk44vq15lmhAj9CIAGwgeWKw==
+crypto-js@4.2.0:
+  version "4.2.0"
+  resolved "https://registry.yarnpkg.com/crypto-js/-/crypto-js-4.2.0.tgz#4d931639ecdfd12ff80e8186dba6af2c2e856631"
+  integrity sha512-KALDyEYgpY+Rlob/iriUtjV6d5Eq+Y191A5g4UqLAi8CyGP9N1+FdVbkc1SxKc2r4YAYqG8JzO2KGL+AizD70Q==
 
 dashdash@^1.12.0:
   version "1.14.1"