diff --git a/Cargo.lock b/Cargo.lock
index 8bfbc00cf..690bda0a3 100644
--- a/Cargo.lock
+++ b/Cargo.lock
@@ -1409,9 +1409,9 @@ dependencies = [
 
 [[package]]
 name = "sha2"
-version = "0.10.7"
+version = "0.10.8"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "479fb9d862239e610720565ca91403019f2f00410f1864c5aa7479b950a76ed8"
+checksum = "793db75ad2bcafc3ffa7c68b215fee268f537982cd901d132f89c6343f3a3dc8"
 dependencies = [
  "cfg-if",
  "cpufeatures",
diff --git a/pkcs12/Cargo.toml b/pkcs12/Cargo.toml
index c343ce744..ec1e00aae 100644
--- a/pkcs12/Cargo.toml
+++ b/pkcs12/Cargo.toml
@@ -28,7 +28,7 @@ hex-literal = "0.3.3"
 pkcs8 = { version = "0.10.2", features = ["pkcs5", "getrandom"] }
 pkcs5 = {version = "0.7.1", features = ["pbes2", "3des"]}
 subtle-encoding = "0.5.1"
-sha2 = "0.10.7"
+sha2 = "0.10.8"
 whirlpool = "0.10.4"
 
 [features]
diff --git a/pkcs5/Cargo.toml b/pkcs5/Cargo.toml
index 2596f266f..bba3192a6 100644
--- a/pkcs5/Cargo.toml
+++ b/pkcs5/Cargo.toml
@@ -25,7 +25,7 @@ des = { version = "0.8.1", optional = true, default-features = false }
 pbkdf2 = { version = "0.12.1", optional = true, default-features = false }
 scrypt = { version = "0.11", optional = true, default-features = false }
 sha1 = { version = "0.10.6", optional = true, default-features = false }
-sha2 = { version = "0.10.2", optional = true, default-features = false }
+sha2 = { version = "0.10.8", optional = true, default-features = false }
 
 [dev-dependencies]
 hex-literal = "0.4"