diff --git a/Cargo.lock b/Cargo.lock
index c57e004..6c6b617 100644
--- a/Cargo.lock
+++ b/Cargo.lock
@@ -850,7 +850,7 @@ dependencies = [
  "ed25519 2.2.2",
  "rand_core 0.6.4",
  "serde",
- "sha2 0.10.7",
+ "sha2 0.10.8",
  "zeroize",
 ]
 
@@ -1010,7 +1010,7 @@ dependencies = [
  "ring",
  "serde",
  "serde_bytes",
- "sha2 0.10.7",
+ "sha2 0.10.8",
  "thiserror",
  "zeroize",
 ]
@@ -1529,7 +1529,7 @@ dependencies = [
  "quick-protobuf",
  "rand 0.8.5",
  "ring",
- "sha2 0.10.7",
+ "sha2 0.10.8",
  "thiserror",
  "zeroize",
 ]
@@ -2042,7 +2042,7 @@ dependencies = [
  "core2",
  "digest 0.10.7",
  "multihash-derive",
- "sha2 0.10.7",
+ "sha2 0.10.8",
  "sha3",
  "unsigned-varint",
 ]
@@ -2698,9 +2698,9 @@ dependencies = [
 
 [[package]]
 name = "sha2"
-version = "0.10.7"
+version = "0.10.8"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "479fb9d862239e610720565ca91403019f2f00410f1864c5aa7479b950a76ed8"
+checksum = "793db75ad2bcafc3ffa7c68b215fee268f537982cd901d132f89c6343f3a3dc8"
 dependencies = [
  "cfg-if",
  "cpufeatures",
@@ -3030,7 +3030,7 @@ dependencies = [
  "rand 0.8.5",
  "ref-cast",
  "serde",
- "sha2 0.10.7",
+ "sha2 0.10.8",
  "thiserror",
 ]
 
@@ -3470,7 +3470,7 @@ dependencies = [
  "rustix 0.38.28",
  "serde",
  "serde_derive",
- "sha2 0.10.7",
+ "sha2 0.10.8",
  "toml 0.5.11",
  "windows-sys 0.48.0",
  "zstd",
diff --git a/keypair/Cargo.toml b/keypair/Cargo.toml
index 620f568..6faf557 100644
--- a/keypair/Cargo.toml
+++ b/keypair/Cargo.toml
@@ -16,7 +16,7 @@ thiserror = "1.0.23"
 lazy_static = "1.4"
 libsecp256k1 = "0.7.1"
 asn1_der = "0.6.1"
-sha2 = "0.10.6"
+sha2 = "0.10.7"
 zeroize = "1"
 serde_bytes = "0.11"
 eyre = "0.6.5"
diff --git a/trust-graph/Cargo.toml b/trust-graph/Cargo.toml
index 05f3f4d..ceda3cc 100644
--- a/trust-graph/Cargo.toml
+++ b/trust-graph/Cargo.toml
@@ -17,6 +17,6 @@ log = "0.4.11"
 ref-cast = "1.0.2"
 derivative = "2.2.0"
 thiserror = "1.0.23"
-sha2 = "0.10.6"
+sha2 = "0.10.7"
 nonempty = "0.8.1"
 rand = "0.8.5"