diff --git a/package-lock.json b/package-lock.json
index e36ecdd9873..cd0606b9fde 100644
--- a/package-lock.json
+++ b/package-lock.json
@@ -68,7 +68,7 @@
 				"connect-redis": "^6.1.3",
 				"cors": "^2.8.1",
 				"cross-env": "^7.0.0",
-				"crypto-js": "^4.0.0",
+				"crypto-js": "^4.2.0",
 				"disposable-email-domains": "^1.0.56",
 				"es6-promisify": "^7.0.0",
 				"express": "^4.14.0",
@@ -9069,9 +9069,9 @@
 			}
 		},
 		"node_modules/crypto-js": {
-			"version": "4.1.1",
-			"resolved": "https://registry.npmjs.org/crypto-js/-/crypto-js-4.1.1.tgz",
-			"integrity": "sha512-o2JlM7ydqd3Qk9CA0L4NL6mTzU2sdx96a+oOfPu8Mkl/PK51vSyoi8/rQ8NknZtk44vq15lmhAj9CIAGwgeWKw=="
+			"version": "4.2.0",
+			"resolved": "https://registry.npmjs.org/crypto-js/-/crypto-js-4.2.0.tgz",
+			"integrity": "sha512-KALDyEYgpY+Rlob/iriUtjV6d5Eq+Y191A5g4UqLAi8CyGP9N1+FdVbkc1SxKc2r4YAYqG8JzO2KGL+AizD70Q=="
 		},
 		"node_modules/css-select": {
 			"version": "5.1.0",
@@ -31721,9 +31721,9 @@
 			"integrity": "sha1-iNf/fsDfuG9xPch7u0LQRNPmxBs="
 		},
 		"crypto-js": {
-			"version": "4.1.1",
-			"resolved": "https://registry.npmjs.org/crypto-js/-/crypto-js-4.1.1.tgz",
-			"integrity": "sha512-o2JlM7ydqd3Qk9CA0L4NL6mTzU2sdx96a+oOfPu8Mkl/PK51vSyoi8/rQ8NknZtk44vq15lmhAj9CIAGwgeWKw=="
+			"version": "4.2.0",
+			"resolved": "https://registry.npmjs.org/crypto-js/-/crypto-js-4.2.0.tgz",
+			"integrity": "sha512-KALDyEYgpY+Rlob/iriUtjV6d5Eq+Y191A5g4UqLAi8CyGP9N1+FdVbkc1SxKc2r4YAYqG8JzO2KGL+AizD70Q=="
 		},
 		"css-select": {
 			"version": "5.1.0",
diff --git a/package.json b/package.json
index a82df72904f..45e150f6668 100644
--- a/package.json
+++ b/package.json
@@ -151,7 +151,7 @@
 		"connect-redis": "^6.1.3",
 		"cors": "^2.8.1",
 		"cross-env": "^7.0.0",
-		"crypto-js": "^4.0.0",
+		"crypto-js": "^4.2.0",
 		"disposable-email-domains": "^1.0.56",
 		"es6-promisify": "^7.0.0",
 		"express": "^4.14.0",