diff --git a/Cargo.lock b/Cargo.lock
index 8426a25672..94d7df22c1 100644
--- a/Cargo.lock
+++ b/Cargo.lock
@@ -2716,9 +2716,9 @@ checksum = "2579985fda508104f7587689507983eadd6a6e84dd35d6d115361f530916fa0d"
 
 [[package]]
 name = "sha2"
-version = "0.9.6"
+version = "0.9.8"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "9204c41a1597a8c5af23c82d1c921cb01ec0a4c59e07a9c7306062829a3903f3"
+checksum = "b69f9a4c9740d74c5baa3fd2e547f9525fa8088a8a958e0ca2409a514e33f5fa"
 dependencies = [
  "block-buffer",
  "cfg-if 1.0.0",
diff --git a/modules/Cargo.toml b/modules/Cargo.toml
index 71f7465bf1..c48fad507d 100644
--- a/modules/Cargo.toml
+++ b/modules/Cargo.toml
@@ -38,7 +38,7 @@ prost-types = "0.7"
 bytes = "1.1.0"
 regex = "1"
 subtle-encoding = "0.5"
-sha2 = { version = "0.9.6", optional = true }
+sha2 = { version = "0.9.8", optional = true }
 flex-error = { version = "0.4.2", default-features = false }
 
 [dependencies.tendermint]
@@ -58,7 +58,7 @@ test-env-log = { version = "0.2.7", features = ["trace"] }
 modelator = "0.2.1"
 tendermint-rpc = { version = "=0.21.0", features = ["http-client", "websocket-client"] }
 tendermint-testgen = { version = "=0.21.0" } # Needed for generating (synthetic) light blocks.
-sha2 = { version = "0.9.6" }
+sha2 = { version = "0.9.8" }
 
 [[test]]
 name = "mbt"
diff --git a/relayer/Cargo.toml b/relayer/Cargo.toml
index a76bb5b21d..20a60c172c 100644
--- a/relayer/Cargo.toml
+++ b/relayer/Cargo.toml
@@ -48,7 +48,7 @@ hex = "0.4"
 bitcoin = { version = "=0.27", features = ["use-serde"] }
 tiny-bip39 = "0.8.0"
 hdpath = { version = "0.6.0", features = ["with-bitcoin"] }
-sha2 = "0.9.6"
+sha2 = "0.9.8"
 tiny-keccak = { version = "2.0.2", features = ["keccak"], default-features = false }
 ripemd160 = "0.9.1"
 bech32 = "0.8.1"