diff --git a/packages/react-shopify-app-bridge/package.json b/packages/react-shopify-app-bridge/package.json
index 153fe318b..88c23aa58 100644
--- a/packages/react-shopify-app-bridge/package.json
+++ b/packages/react-shopify-app-bridge/package.json
@@ -29,7 +29,7 @@
   "dependencies": {
     "@gadgetinc/api-client-core": "^0.15.11",
     "@shopify/app-bridge-utils": "^3.1.1",
-    "crypto-js": "^4.1.1"
+    "crypto-js": "^4.2.0"
   },
   "devDependencies": {
     "@gadgetinc/api-client-core": "workspace:*",
diff --git a/pnpm-lock.yaml b/pnpm-lock.yaml
index af14832f9..79e25ca96 100644
--- a/pnpm-lock.yaml
+++ b/pnpm-lock.yaml
@@ -1,4 +1,4 @@
-lockfileVersion: '6.1'
+lockfileVersion: '6.0'
 
 settings:
   autoInstallPeers: true
@@ -265,8 +265,8 @@ importers:
         specifier: ^3.1.1
         version: 3.1.1
       crypto-js:
-        specifier: ^4.1.1
-        version: 4.1.1
+        specifier: ^4.2.0
+        version: 4.2.0
     devDependencies:
       '@gadgetinc/react':
         specifier: workspace:*
@@ -2870,8 +2870,8 @@ packages:
       which: 2.0.2
     dev: true
 
-  /crypto-js@4.1.1:
-    resolution: {integrity: sha512-o2JlM7ydqd3Qk9CA0L4NL6mTzU2sdx96a+oOfPu8Mkl/PK51vSyoi8/rQ8NknZtk44vq15lmhAj9CIAGwgeWKw==}
+  /crypto-js@4.2.0:
+    resolution: {integrity: sha512-KALDyEYgpY+Rlob/iriUtjV6d5Eq+Y191A5g4UqLAi8CyGP9N1+FdVbkc1SxKc2r4YAYqG8JzO2KGL+AizD70Q==}
     dev: false
 
   /css.escape@1.5.1: