diff --git a/packages/credential/package.json b/packages/credential/package.json
index 7d90325..14e4399 100644
--- a/packages/credential/package.json
+++ b/packages/credential/package.json
@@ -20,7 +20,7 @@
     "@alicloud/pop-core": "^1.7.13",
     "@serverless-devs/acc": "^1.1.3",
     "@serverless-devs/utils": "workspace:^",
-    "crypto-js": "^4.1.1",
+    "crypto-js": "^4.2.0",
     "fs-extra": "^11.1.0",
     "inquirer": "^8.2.4",
     "js-yaml": "^4.1.0",
diff --git a/pnpm-lock.yaml b/pnpm-lock.yaml
index 0bcec33..c93c0cb 100644
--- a/pnpm-lock.yaml
+++ b/pnpm-lock.yaml
@@ -83,8 +83,8 @@ importers:
         specifier: workspace:^
         version: link:../utils
       crypto-js:
-        specifier: ^4.1.1
-        version: 4.1.1
+        specifier: ^4.2.0
+        version: 4.2.0
       fs-extra:
         specifier: ^11.1.0
         version: 11.1.1
@@ -1930,8 +1930,8 @@ packages:
     resolution: {integrity: sha512-mCxBlsHFYh9C+HVpiEacem8FEBnMXgU9gy4zmNC+SXAZNB/1idgp/aulFJ4FgCi7GPEVbfyng092GqL2k2rmow==}
     dev: false
 
-  /crypto-js@4.1.1:
-    resolution: {integrity: sha512-o2JlM7ydqd3Qk9CA0L4NL6mTzU2sdx96a+oOfPu8Mkl/PK51vSyoi8/rQ8NknZtk44vq15lmhAj9CIAGwgeWKw==}
+  /crypto-js@4.2.0:
+    resolution: {integrity: sha512-KALDyEYgpY+Rlob/iriUtjV6d5Eq+Y191A5g4UqLAi8CyGP9N1+FdVbkc1SxKc2r4YAYqG8JzO2KGL+AizD70Q==}
     dev: false
 
   /d@1.0.1: