diff --git a/Cargo.lock b/Cargo.lock
index 23bc30482..47cebc85d 100644
--- a/Cargo.lock
+++ b/Cargo.lock
@@ -3238,9 +3238,9 @@ dependencies = [
 
 [[package]]
 name = "sha2"
-version = "0.10.7"
+version = "0.10.8"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "479fb9d862239e610720565ca91403019f2f00410f1864c5aa7479b950a76ed8"
+checksum = "793db75ad2bcafc3ffa7c68b215fee268f537982cd901d132f89c6343f3a3dc8"
 dependencies = [
  "cfg-if",
  "cpufeatures",
diff --git a/clash_lib/Cargo.toml b/clash_lib/Cargo.toml
index 8dfc4a6e0..8c21fd7db 100644
--- a/clash_lib/Cargo.toml
+++ b/clash_lib/Cargo.toml
@@ -50,7 +50,7 @@ opentelemetry-jaeger = { version = "0.19", features = ["collector_client", "hype
 crc32fast = "1.3.2"
 brotli = "3.3.4"
 hmac = "0.12.1"
-sha2 = "0.10.6"
+sha2 = "0.10.8"
 md-5 = "0.10.5"
 chacha20poly1305 = "0.10"
 aes-gcm = "0.10"