diff --git a/package-lock.json b/package-lock.json
index 0fbd13d31..177553d57 100644
--- a/package-lock.json
+++ b/package-lock.json
@@ -898,10 +898,23 @@
         "url": "https://paulmillr.com/funding/"
       }
     },
-    "node_modules/@noble/hashes": {
+    "node_modules/@noble/curves/node_modules/@noble/hashes": {
       "version": "1.5.0",
       "resolved": "https://registry.npmjs.org/@noble/hashes/-/hashes-1.5.0.tgz",
       "integrity": "sha512-1j6kQFb7QRru7eKN3ZDvRcP13rugwdxZqCjbiAVZfIJwgj2A65UmT4TgARXGlXgnRkORLTDTrO19ZErt7+QXgA==",
+      "license": "MIT",
+      "engines": {
+        "node": "^14.21.3 || >=16"
+      },
+      "funding": {
+        "url": "https://paulmillr.com/funding/"
+      }
+    },
+    "node_modules/@noble/hashes": {
+      "version": "1.6.1",
+      "resolved": "https://registry.npmjs.org/@noble/hashes/-/hashes-1.6.1.tgz",
+      "integrity": "sha512-pq5D8h10hHBjyqX+cfBm0i8JUXJ0UhczFc4r74zbuT9XgewFo2E3J1cOaGtdZynILNmQ685YWGzGE1Zv6io50w==",
+      "license": "MIT",
       "engines": {
         "node": "^14.21.3 || >=16"
       },
@@ -4649,7 +4662,7 @@
       "dependencies": {
         "@divviup/common": "^0.2.2",
         "@divviup/field": "^0.2.1",
-        "@noble/hashes": "^1.5.0",
+        "@noble/hashes": "^1.6.1",
         "jssha": "^3.3.1"
       }
     }
diff --git a/packages/xof/package.json b/packages/xof/package.json
index 995617c82..1b003a3d0 100644
--- a/packages/xof/package.json
+++ b/packages/xof/package.json
@@ -21,7 +21,7 @@
   "dependencies": {
     "@divviup/common": "^0.2.2",
     "@divviup/field": "^0.2.1",
-    "@noble/hashes": "^1.5.0",
+    "@noble/hashes": "^1.6.1",
     "jssha": "^3.3.1"
   }
 }