diff --git a/Cargo.lock b/Cargo.lock
index 25bde667ebf..519b81c7503 100644
--- a/Cargo.lock
+++ b/Cargo.lock
@@ -4784,9 +4784,9 @@ checksum = "bbfa15b3dddfee50a0fff136974b3e1bde555604ba463834a7eb7deb6417705d"
 
 [[package]]
 name = "sha2"
-version = "0.10.8"
+version = "0.10.9"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "793db75ad2bcafc3ffa7c68b215fee268f537982cd901d132f89c6343f3a3dc8"
+checksum = "a7507d819769d01a365ab707794a4084392c824f54a7a6a7862f8c3d0892b283"
 dependencies = [
  "cfg-if 1.0.0",
  "cpufeatures",
diff --git a/graph/Cargo.toml b/graph/Cargo.toml
index bb4287b2c31..354ae1a0057 100644
--- a/graph/Cargo.toml
+++ b/graph/Cargo.toml
@@ -51,7 +51,7 @@ serde_derive = { workspace = true }
 serde_json = { workspace = true }
 serde_regex = { workspace = true }
 serde_yaml = { workspace = true }
-sha2 = "0.10.8"
+sha2 = "0.10.9"
 slog = { version = "2.7.0", features = [
     "release_max_level_trace",
     "max_level_trace",