diff --git a/Cargo.lock b/Cargo.lock
index 313e3c3344c8f..c6074bb949e1a 100644
--- a/Cargo.lock
+++ b/Cargo.lock
@@ -5838,9 +5838,9 @@ dependencies = [
 
 [[package]]
 name = "sha2"
-version = "0.10.2"
+version = "0.10.5"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "55deaec60f81eefe3cce0dc50bda92d6d8e88f2a27df7c5033b42afeb1ed2676"
+checksum = "cf9db03534dff993187064c4e0c05a5708d2a9728ace9a8959b77bedf415dac5"
 dependencies = [
  "cfg-if",
  "cpufeatures",
diff --git a/src/avro/Cargo.toml b/src/avro/Cargo.toml
index ad68e03b9fde4..9b381d4d4ebc3 100644
--- a/src/avro/Cargo.toml
+++ b/src/avro/Cargo.toml
@@ -24,7 +24,7 @@ rand = "0.8.5"
 regex = "1.6.0"
 serde = { version = "1.0.144", features = ["derive"] }
 serde_json = "1.0.85"
-sha2 = "0.10.2"
+sha2 = "0.10.5"
 snap = { version = "1.0.5", optional = true }
 tracing = "0.1.36"
 uuid = "1.1.2"
diff --git a/src/expr/Cargo.toml b/src/expr/Cargo.toml
index 2c2f7f72ae04a..d2b6f965fd1e9 100644
--- a/src/expr/Cargo.toml
+++ b/src/expr/Cargo.toml
@@ -43,7 +43,7 @@ serde = { version = "1.0.144", features = ["derive"] }
 serde_json = "1.0.85"
 serde_regex = "1.1.0"
 sha1 = "0.10.0"
-sha2 = "0.10.2"
+sha2 = "0.10.5"
 uncased = "0.9.7"
 uuid = "1.1.2"
 proptest = { git = "https://github.com/MaterializeInc/proptest.git", default-features = false, features = ["std"] }
diff --git a/src/npm/Cargo.toml b/src/npm/Cargo.toml
index 89395051a748d..db36adaff19cc 100644
--- a/src/npm/Cargo.toml
+++ b/src/npm/Cargo.toml
@@ -12,6 +12,6 @@ flate2 = "1.0.24"
 hex = "0.4.3"
 hex-literal = "0.3.4"
 reqwest = { version = "0.11.11", features = ["blocking", "native-tls-vendored"] }
-sha2 = "0.10.2"
+sha2 = "0.10.5"
 tar = "0.4.38"
 walkdir = "2.3.2"
diff --git a/src/orchestrator-kubernetes/Cargo.toml b/src/orchestrator-kubernetes/Cargo.toml
index 9d0d415c94ba7..c40301f5902c0 100644
--- a/src/orchestrator-kubernetes/Cargo.toml
+++ b/src/orchestrator-kubernetes/Cargo.toml
@@ -19,4 +19,4 @@ mz-repr = { path = "../repr" }
 k8s-openapi = { version = "0.15.0", features = ["v1_22"] }
 kube = { version = "0.74.0", features = ["runtime", "ws"] }
 serde_json = "1.0.85"
-sha2 = "0.10.2"
+sha2 = "0.10.5"