diff --git a/wrongsecrets-balancer/package-lock.json b/wrongsecrets-balancer/package-lock.json
index af39aae36..307e449f6 100644
--- a/wrongsecrets-balancer/package-lock.json
+++ b/wrongsecrets-balancer/package-lock.json
@@ -14,7 +14,7 @@
         "@google-cloud/storage": "^7.14.0",
         "@kubernetes/client-node": "^1.2.0",
         "basic-auth-connect": "^1.1.0",
-        "bcryptjs": "^2.4.3",
+        "bcryptjs": "^3.0.0",
         "cookie": "^1.0.1",
         "cookie-parser": "^1.4.6",
         "crypto-random-string": "^3.3.1",
@@ -2281,10 +2281,13 @@
       }
     },
     "node_modules/bcryptjs": {
-      "version": "2.4.3",
-      "resolved": "https://registry.npmjs.org/bcryptjs/-/bcryptjs-2.4.3.tgz",
-      "integrity": "sha512-V/Hy/X9Vt7f3BbPJEi8BdVFMByHi+jNXrYkW3huaybV/kQ0KJg0Y6PkEMbn+zeT+i+SiKZ/HMqJGIIt4LZDqNQ==",
-      "license": "MIT"
+      "version": "3.0.2",
+      "resolved": "https://registry.npmjs.org/bcryptjs/-/bcryptjs-3.0.2.tgz",
+      "integrity": "sha512-k38b3XOZKv60C4E2hVsXTolJWfkGRMbILBIe2IBITXciy5bOsTKot5kDrf3ZfufQtQOUN5mXceUEpU1rTl9Uog==",
+      "license": "BSD-3-Clause",
+      "bin": {
+        "bcrypt": "bin/bcrypt"
+      }
     },
     "node_modules/bignumber.js": {
       "version": "9.3.0",
@@ -3216,19 +3219,6 @@
         "url": "https://opencollective.com/eslint"
       }
     },
-    "node_modules/eslint/node_modules/@eslint/js": {
-      "version": "9.32.0",
-      "resolved": "https://registry.npmjs.org/@eslint/js/-/js-9.32.0.tgz",
-      "integrity": "sha512-BBpRFZK3eX6uMLKz8WxFOBIFFcGFJ/g8XuwjTHCqHROSIsopI+ddn/d5Cfh36+7+e5edVS8dbSHnBNhrLEX0zg==",
-      "dev": true,
-      "license": "MIT",
-      "engines": {
-        "node": "^18.18.0 || ^20.9.0 || >=21.1.0"
-      },
-      "funding": {
-        "url": "https://eslint.org/donate"
-      }
-    },
     "node_modules/eslint/node_modules/minimatch": {
       "version": "3.1.2",
       "resolved": "https://registry.npmjs.org/minimatch/-/minimatch-3.1.2.tgz",
diff --git a/wrongsecrets-balancer/package.json b/wrongsecrets-balancer/package.json
index 425dbdfdb..072f3d4c4 100644
--- a/wrongsecrets-balancer/package.json
+++ b/wrongsecrets-balancer/package.json
@@ -16,7 +16,7 @@
     "@google-cloud/storage": "^7.14.0",
     "@kubernetes/client-node": "^1.2.0",
     "basic-auth-connect": "^1.1.0",
-    "bcryptjs": "^2.4.3",
+    "bcryptjs": "^3.0.0",
     "cookie": "^1.0.1",
     "cookie-parser": "^1.4.6",
     "crypto-random-string": "^3.3.1",