diff --git a/package-lock.json b/package-lock.json
index ccb48a499..d555e9054 100644
--- a/package-lock.json
+++ b/package-lock.json
@@ -631,6 +631,18 @@
         "node": ">=16.0.0"
       }
     },
+    "node_modules/@hpke/dhkem-x25519/node_modules/@noble/hashes": {
+      "version": "1.4.0",
+      "resolved": "https://registry.npmjs.org/@noble/hashes/-/hashes-1.4.0.tgz",
+      "integrity": "sha512-V1JJ1WTRUqHHrOSh597hURcMqVKVGL/ea3kv0gSnEdsEZ0/+VyPghM1lMNGc00z7CIQorSvbKpuJkxvuHbvdbg==",
+      "dev": true,
+      "engines": {
+        "node": ">= 16"
+      },
+      "funding": {
+        "url": "https://paulmillr.com/funding/"
+      }
+    },
     "node_modules/@humanwhocodes/module-importer": {
       "version": "1.0.1",
       "resolved": "https://registry.npmjs.org/@humanwhocodes/module-importer/-/module-importer-1.0.1.tgz",
@@ -813,7 +825,7 @@
         "url": "https://paulmillr.com/funding/"
       }
     },
-    "node_modules/@noble/hashes": {
+    "node_modules/@noble/curves/node_modules/@noble/hashes": {
       "version": "1.4.0",
       "resolved": "https://registry.npmjs.org/@noble/hashes/-/hashes-1.4.0.tgz",
       "integrity": "sha512-V1JJ1WTRUqHHrOSh597hURcMqVKVGL/ea3kv0gSnEdsEZ0/+VyPghM1lMNGc00z7CIQorSvbKpuJkxvuHbvdbg==",
@@ -824,6 +836,17 @@
         "url": "https://paulmillr.com/funding/"
       }
     },
+    "node_modules/@noble/hashes": {
+      "version": "1.5.0",
+      "resolved": "https://registry.npmjs.org/@noble/hashes/-/hashes-1.5.0.tgz",
+      "integrity": "sha512-1j6kQFb7QRru7eKN3ZDvRcP13rugwdxZqCjbiAVZfIJwgj2A65UmT4TgARXGlXgnRkORLTDTrO19ZErt7+QXgA==",
+      "engines": {
+        "node": "^14.21.3 || >=16"
+      },
+      "funding": {
+        "url": "https://paulmillr.com/funding/"
+      }
+    },
     "node_modules/@nodelib/fs.scandir": {
       "version": "2.1.5",
       "resolved": "https://registry.npmjs.org/@nodelib/fs.scandir/-/fs.scandir-2.1.5.tgz",
@@ -2606,6 +2629,17 @@
         "node": ">=16.0.0"
       }
     },
+    "node_modules/hpke-js/node_modules/@noble/hashes": {
+      "version": "1.4.0",
+      "resolved": "https://registry.npmjs.org/@noble/hashes/-/hashes-1.4.0.tgz",
+      "integrity": "sha512-V1JJ1WTRUqHHrOSh597hURcMqVKVGL/ea3kv0gSnEdsEZ0/+VyPghM1lMNGc00z7CIQorSvbKpuJkxvuHbvdbg==",
+      "engines": {
+        "node": ">= 16"
+      },
+      "funding": {
+        "url": "https://paulmillr.com/funding/"
+      }
+    },
     "node_modules/html-escaper": {
       "version": "2.0.2",
       "resolved": "https://registry.npmjs.org/html-escaper/-/html-escaper-2.0.2.tgz",
@@ -4446,7 +4480,7 @@
       "dependencies": {
         "@divviup/common": "^0.2.2",
         "@divviup/field": "^0.2.1",
-        "@noble/hashes": "^1.4.0",
+        "@noble/hashes": "^1.5.0",
         "jssha": "^3.3.1"
       }
     }
diff --git a/packages/xof/package.json b/packages/xof/package.json
index 2cce38136..995617c82 100644
--- a/packages/xof/package.json
+++ b/packages/xof/package.json
@@ -21,7 +21,7 @@
   "dependencies": {
     "@divviup/common": "^0.2.2",
     "@divviup/field": "^0.2.1",
-    "@noble/hashes": "^1.4.0",
+    "@noble/hashes": "^1.5.0",
     "jssha": "^3.3.1"
   }
 }