diff --git a/adapters/file-read/Cargo.toml b/adapters/file-read/Cargo.toml
index 5b86986f..cbe54cac 100644
--- a/adapters/file-read/Cargo.toml
+++ b/adapters/file-read/Cargo.toml
@@ -10,7 +10,7 @@ repository = "https://github.com/provability-fabric/provability-fabric"
 [dependencies]
 serde = { version = "1.0", features = ["derive"] }
 serde_json = "1.0"
-sha2 = "0.10"
+sha2 = "0.11"
 libseccomp = { version = "0.1", optional = true }
 libc = "0.2"
 
diff --git a/adapters/http-get/Cargo.toml b/adapters/http-get/Cargo.toml
index d694192f..64c4085a 100644
--- a/adapters/http-get/Cargo.toml
+++ b/adapters/http-get/Cargo.toml
@@ -11,7 +11,7 @@ repository = "https://github.com/provability-fabric/provability-fabric"
 serde = { version = "1.0", features = ["derive"] }
 serde_json = "1.0"
 reqwest = { version = "0.11", features = ["json"] }
-sha2 = "0.10"
+sha2 = "0.11"
 url = "2.4"
 tokio = { version = "1.0", features = ["full"] }
 libseccomp = { version = "0.1", optional = true }
diff --git a/runtime/attestor/Cargo.toml b/runtime/attestor/Cargo.toml
index a76ec9cf..7fff0353 100644
--- a/runtime/attestor/Cargo.toml
+++ b/runtime/attestor/Cargo.toml
@@ -15,7 +15,7 @@ redis = { version = "0.27", features = ["tokio-comp"] }
 tracing = "0.1"
 tracing-subscriber = "0.3"
 anyhow = "1.0"
-sha2 = "0.10"
+sha2 = "0.11"
 base64 = "0.21"
 hex = "0.4"
 
diff --git a/runtime/kms-proxy/Cargo.toml b/runtime/kms-proxy/Cargo.toml
index 1411445b..c8c779d1 100644
--- a/runtime/kms-proxy/Cargo.toml
+++ b/runtime/kms-proxy/Cargo.toml
@@ -14,7 +14,7 @@ tracing-subscriber = "0.3"
 chrono = { version = "0.4", features = ["serde"] }
 uuid = { version = "1.0", features = ["v4"] }
 base64 = "0.21"
-sha2 = "0.10"
+sha2 = "0.11"
 hmac = "0.12"
 hex = "0.4"
 hyper = { version = "0.14", features = ["full"] }
diff --git a/runtime/labeler/Cargo.toml b/runtime/labeler/Cargo.toml
index d7c96d78..110654cd 100644
--- a/runtime/labeler/Cargo.toml
+++ b/runtime/labeler/Cargo.toml
@@ -10,7 +10,7 @@ regex = "1.10"
 serde = { version = "1.0", features = ["derive"] }
 serde_json = "1.0"
 serde_yaml = "0.9"
-sha2 = "0.10"
+sha2 = "0.11"
 
 [dev-dependencies]
 rand = "0.8"
diff --git a/runtime/sidecar-watcher/Cargo.toml b/runtime/sidecar-watcher/Cargo.toml
index 37b023a6..c6499556 100644
--- a/runtime/sidecar-watcher/Cargo.toml
+++ b/runtime/sidecar-watcher/Cargo.toml
@@ -19,7 +19,7 @@ prometheus-client = "0.22"
 reqwest = { version = "0.11", features = ["json"] }
 chrono = { version = "0.4", features = ["serde"] }
 uuid = { version = "1.0", features = ["v4"] }
-sha2 = "0.10"
+sha2 = "0.11"
 md5 = "0.7"
 axum = "0.7"
 jsonschema = "0.17"
diff --git a/runtime/tool-broker/Cargo.toml b/runtime/tool-broker/Cargo.toml
index faae4413..6990945e 100644
--- a/runtime/tool-broker/Cargo.toml
+++ b/runtime/tool-broker/Cargo.toml
@@ -15,7 +15,7 @@ tracing-subscriber = "0.3"
 uuid = { version = "1.0", features = ["v4"] }
 chrono = { version = "0.4", features = ["serde"] }
 base64 = "0.21"
-sha2 = "0.10"
+sha2 = "0.11"
 hmac = "0.12"
 hex = "0.4"
 metrics = "0.21"
diff --git a/runtime/wasm-sandbox/Cargo.toml b/runtime/wasm-sandbox/Cargo.toml
index 56ae441a..afeba797 100644
--- a/runtime/wasm-sandbox/Cargo.toml
+++ b/runtime/wasm-sandbox/Cargo.toml
@@ -16,7 +16,7 @@ tracing = "0.1"
 tracing-subscriber = "0.3"
 clap = { version = "4.0", features = ["derive"] }
 hex = "0.4"
-sha2 = "0.10"
+sha2 = "0.11"
 metrics = "0.21"
 metrics-exporter-prometheus = "0.12"