diff --git a/package-lock.json b/package-lock.json
index e48d0f8835..02f4f46679 100644
--- a/package-lock.json
+++ b/package-lock.json
@@ -9587,14 +9587,23 @@
             "dev": true
         },
         "node_modules/sha.js": {
-            "version": "2.4.11",
+            "version": "2.4.12",
+            "resolved": "https://registry.npmjs.org/sha.js/-/sha.js-2.4.12.tgz",
+            "integrity": "sha512-8LzC5+bvI45BjpfXU8V5fdU2mfeKiQe1D1gIMn7XUlF3OTUrpdJpPPH4EMAnF0DsHHdSZqCdSss5qCmJKuiO3w==",
             "license": "(MIT AND BSD-3-Clause)",
             "dependencies": {
-                "inherits": "^2.0.1",
-                "safe-buffer": "^5.0.1"
+                "inherits": "^2.0.4",
+                "safe-buffer": "^5.2.1",
+                "to-buffer": "^1.2.0"
             },
             "bin": {
                 "sha.js": "bin.js"
+            },
+            "engines": {
+                "node": ">= 0.10"
+            },
+            "funding": {
+                "url": "https://github.com/sponsors/ljharb"
             }
         },
         "node_modules/shallow-clone": {
diff --git a/package.json b/package.json
index cc0fa67d52..f1080557d4 100644
--- a/package.json
+++ b/package.json
@@ -58,5 +58,16 @@
         "signature_pad": "^4.2.0",
         "tableexport.jquery.plugin": "^1.33.0",
         "tether": "^1.4.0"
+    },
+    "overrides": {
+      "pbkdf2": {
+        "sha.js": ">=2.4.12"
+      },
+      "create-hmac": {
+        "sha.js": ">=2.4.12"
+      },
+      "create-hash": {
+        "sha.js": ">=2.4.12"
+      }
     }
 }