diff --git a/package.json b/package.json
index 324dcbcd..9f957b3c 100644
--- a/package.json
+++ b/package.json
@@ -59,6 +59,7 @@
     "pdfmake": "^0.1.65"
   },
   "resolutions": {
+    "**/crypto-js": "4.2.0",
     "**/semver": "5.7.2",
     "**/tough-cookie": "4.1.3",
     "**/socket.io-parser": "4.2.3",
diff --git a/yarn.lock b/yarn.lock
index 7879a109..41353015 100644
--- a/yarn.lock
+++ b/yarn.lock
@@ -802,10 +802,10 @@ cors@~2.8.5:
     object-assign "^4"
     vary "^1"
 
-crypto-js@^4.0.0:
-  version "4.1.1"
-  resolved "https://registry.yarnpkg.com/crypto-js/-/crypto-js-4.1.1.tgz#9e485bcf03521041bd85844786b83fb7619736cf"
-  integrity sha512-o2JlM7ydqd3Qk9CA0L4NL6mTzU2sdx96a+oOfPu8Mkl/PK51vSyoi8/rQ8NknZtk44vq15lmhAj9CIAGwgeWKw==
+crypto-js@4.2.0, crypto-js@^4.0.0:
+  version "4.2.0"
+  resolved "https://registry.yarnpkg.com/crypto-js/-/crypto-js-4.2.0.tgz#4d931639ecdfd12ff80e8186dba6af2c2e856631"
+  integrity sha512-KALDyEYgpY+Rlob/iriUtjV6d5Eq+Y191A5g4UqLAi8CyGP9N1+FdVbkc1SxKc2r4YAYqG8JzO2KGL+AizD70Q==
 
 css@*:
   version "3.0.0"