diff --git a/packages/components/organisms/f-content-cards/package.json b/packages/components/organisms/f-content-cards/package.json
index 27d60d0d24..aebaa4a824 100644
--- a/packages/components/organisms/f-content-cards/package.json
+++ b/packages/components/organisms/f-content-cards/package.json
@@ -73,7 +73,7 @@
     "@vue/cli-plugin-babel": "4.5.16",
     "color": "3.1.3",
     "copy-to-clipboard": "3.3.1",
-    "crypto-js": "4.0.0",
+    "crypto-js": "4.2.0",
     "date-fns": "^2.17.0",
     "http-request-mock": "^1.8.17",
     "jsdom-testing-mocks": "^1.6.0",
diff --git a/packages/services/core-analytics/package.json b/packages/services/core-analytics/package.json
index 16b32ee9b1..6126fdc76a 100644
--- a/packages/services/core-analytics/package.json
+++ b/packages/services/core-analytics/package.json
@@ -40,7 +40,7 @@
         "test:coverage": "jest test:unit --coverage"
     },
     "dependencies": {
-        "crypto-js": "4.0.0",
+        "crypto-js": "4.2.0",
         "jwt-decode": "^3.1.2",
         "universal-cookie": "^4.0.4"
     },
diff --git a/packages/services/f-analytics/package.json b/packages/services/f-analytics/package.json
index 2ad3b7e85b..5ef49e75c7 100644
--- a/packages/services/f-analytics/package.json
+++ b/packages/services/f-analytics/package.json
@@ -40,7 +40,7 @@
     "test:coverage": "jest test:unit --coverage"
   },
   "dependencies": {
-    "crypto-js": "4.0.0",
+    "crypto-js": "4.2.0",
     "jwt-decode": "^3.1.2",
     "universal-cookie": "^4.0.4"
   },
diff --git a/packages/services/f-feature-management/package.json b/packages/services/f-feature-management/package.json
index 4432c05976..ec040c853b 100644
--- a/packages/services/f-feature-management/package.json
+++ b/packages/services/f-feature-management/package.json
@@ -43,7 +43,7 @@
   },
   "dependencies": {
     "@justeat/feature-management": "1.0.1",
-    "crypto-js": "4.1.1"
+    "crypto-js": "4.2.0"
   },
   "volta": {
     "extends": "../../../package.json"
diff --git a/yarn.lock b/yarn.lock
index e86c5d9b14..af9989407f 100644
--- a/yarn.lock
+++ b/yarn.lock
@@ -10511,16 +10511,16 @@ crypto-browserify@^3.11.0:
     randombytes "^2.0.0"
     randomfill "^1.0.3"
 
-crypto-js@4.0.0:
-  version "4.0.0"
-  resolved "https://registry.yarnpkg.com/crypto-js/-/crypto-js-4.0.0.tgz#2904ab2677a9d042856a2ea2ef80de92e4a36dcc"
-  integrity sha512-bzHZN8Pn+gS7DQA6n+iUmBfl0hO5DJq++QP3U6uTucDtk/0iGpXd/Gg7CGR0p8tJhofJyaKoWBuJI4eAO00BBg==
-
 crypto-js@4.1.1:
   version "4.1.1"
   resolved "https://registry.yarnpkg.com/crypto-js/-/crypto-js-4.1.1.tgz#9e485bcf03521041bd85844786b83fb7619736cf"
   integrity sha512-o2JlM7ydqd3Qk9CA0L4NL6mTzU2sdx96a+oOfPu8Mkl/PK51vSyoi8/rQ8NknZtk44vq15lmhAj9CIAGwgeWKw==
 
+crypto-js@4.2.0:
+  version "4.2.0"
+  resolved "https://registry.yarnpkg.com/crypto-js/-/crypto-js-4.2.0.tgz#4d931639ecdfd12ff80e8186dba6af2c2e856631"
+  integrity sha512-KALDyEYgpY+Rlob/iriUtjV6d5Eq+Y191A5g4UqLAi8CyGP9N1+FdVbkc1SxKc2r4YAYqG8JzO2KGL+AizD70Q==
+
 crypto-random-string@^2.0.0:
   version "2.0.0"
   resolved "https://registry.yarnpkg.com/crypto-random-string/-/crypto-random-string-2.0.0.tgz#ef2a7a966ec11083388369baa02ebead229b30d5"