diff --git a/Cargo.lock b/Cargo.lock
index c2f2818c..af40dc6e 100644
--- a/Cargo.lock
+++ b/Cargo.lock
@@ -5126,9 +5126,9 @@ dependencies = [
 
 [[package]]
 name = "sha2"
-version = "0.10.7"
+version = "0.10.8"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "479fb9d862239e610720565ca91403019f2f00410f1864c5aa7479b950a76ed8"
+checksum = "793db75ad2bcafc3ffa7c68b215fee268f537982cd901d132f89c6343f3a3dc8"
 dependencies = [
  "cfg-if",
  "cpufeatures",
diff --git a/crates/jose/Cargo.toml b/crates/jose/Cargo.toml
index 201754fe..7da1a10f 100644
--- a/crates/jose/Cargo.toml
+++ b/crates/jose/Cargo.toml
@@ -25,7 +25,7 @@ sec1 = "0.7.3"
 serde.workspace = true
 serde_json.workspace = true
 serde_with = "3.3.0"
-sha2 = { version = "0.10.7", features = ["oid"] }
+sha2 = { version = "0.10.8", features = ["oid"] }
 signature = "2.1.0"
 thiserror.workspace = true
 tracing.workspace = true
diff --git a/crates/oauth2-types/Cargo.toml b/crates/oauth2-types/Cargo.toml
index 96d85653..9edeec7a 100644
--- a/crates/oauth2-types/Cargo.toml
+++ b/crates/oauth2-types/Cargo.toml
@@ -16,7 +16,7 @@ url.workspace = true
 parse-display = "0.8.2"
 serde_with = { version = "3.3.0", features = ["chrono"] }
 chrono.workspace = true
-sha2 = "0.10.7"
+sha2 = "0.10.8"
 data-encoding = "2.4.0"
 thiserror.workspace = true