diff --git a/Cargo.toml b/Cargo.toml
index 8381d1d..f5215e9 100644
--- a/Cargo.toml
+++ b/Cargo.toml
@@ -76,7 +76,7 @@ poly1305 = { version = "=0.8.0" } # 2025-11-03 sw: MAC verification, constant-ti
 cpufeatures = { version = "=0.2.17" } # 2025-11-03 sw: runtime AES capability detection
 subtle = { version = "=2.6.1" } # 2025-11-03 sw: constant-time comparisons for key/tweak handling
 hmac = { version = "=0.12.1" } # 2025-11-04 sw: HKDF based on HMAC-SHA256 for key derivation
-sha2 = { version = "=0.10.8" } # 2025-11-04 sw: Hash core for HKDF extractor
+sha2 = { version = "=0.10.9" } # 2025-11-04 sw: Hash core for HKDF extractor
 
 # Web Interface & Mesh Networking (2025-11-16 sw; Next-gen web interface with gossip)
 axum = { version = "^0.7.9", features = ["ws", "macros"] } # 2025-11-16 sw: Web server framework