diff --git a/cca-manifest-logic/package.json b/cca-manifest-logic/package.json
index b9be79405..4be970016 100644
--- a/cca-manifest-logic/package.json
+++ b/cca-manifest-logic/package.json
@@ -13,7 +13,7 @@
     "crypto-js": "is not meant to be pinned, but 3.1.2-5 IS later than 3.1.2 (incorrect use of semver), and this works"
   },
   "dependencies": {
-    "crypto-js": "3.1.2-5",
+    "crypto-js": "4.2.0",
     "node.extend": ""
   }
 }