diff --git a/Cargo.lock b/Cargo.lock
index c4fe169fa46..0c41aad0153 100644
--- a/Cargo.lock
+++ b/Cargo.lock
@@ -4706,9 +4706,9 @@ dependencies = [
 
 [[package]]
 name = "sha2"
-version = "0.10.8"
+version = "0.10.9"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "793db75ad2bcafc3ffa7c68b215fee268f537982cd901d132f89c6343f3a3dc8"
+checksum = "a7507d819769d01a365ab707794a4084392c824f54a7a6a7862f8c3d0892b283"
 dependencies = [
  "cfg-if 1.0.0",
  "cpufeatures",
diff --git a/graph/Cargo.toml b/graph/Cargo.toml
index 452ede55ddc..2a7151efd87 100644
--- a/graph/Cargo.toml
+++ b/graph/Cargo.toml
@@ -50,7 +50,7 @@ serde_derive = { workspace = true }
 serde_json = { workspace = true }
 serde_regex = { workspace = true }
 serde_yaml = { workspace = true }
-sha2 = "0.10.8"
+sha2 = "0.10.9"
 slog = { version = "2.7.0", features = [
     "release_max_level_trace",
     "max_level_trace",