diff --git a/cisco_aci/changelog.d/17054.security b/cisco_aci/changelog.d/17054.security
new file mode 100644
index 00000000000000..caf3357b44cad6
--- /dev/null
+++ b/cisco_aci/changelog.d/17054.security
@@ -0,0 +1 @@
+Bump cryptography to 42.0.5
diff --git a/cisco_aci/pyproject.toml b/cisco_aci/pyproject.toml
index 432eed49cb6f25..6c86d8f54eb99c 100644
--- a/cisco_aci/pyproject.toml
+++ b/cisco_aci/pyproject.toml
@@ -40,7 +40,7 @@ license = "BSD-3-Clause"
 [project.optional-dependencies]
 deps = [
     "cryptography==3.3.2; python_version < '3.0'",
-    "cryptography==41.0.7; python_version > '3.0'",
+    "cryptography==42.0.5; python_version > '3.0'",
 ]
 
 [project.urls]
diff --git a/datadog_checks_base/changelog.d/17054.security b/datadog_checks_base/changelog.d/17054.security
new file mode 100644
index 00000000000000..f52ebf3f3aa0d7
--- /dev/null
+++ b/datadog_checks_base/changelog.d/17054.security
@@ -0,0 +1,2 @@
+Bump orjson to 3.9.15
+Bump cryptography to 42.0.5
diff --git a/datadog_checks_base/datadog_checks/base/data/agent_requirements.in b/datadog_checks_base/datadog_checks/base/data/agent_requirements.in
index 1eabc1376f6c3b..aeea0368b197c0 100644
--- a/datadog_checks_base/datadog_checks/base/data/agent_requirements.in
+++ b/datadog_checks_base/datadog_checks/base/data/agent_requirements.in
@@ -20,7 +20,7 @@ cm-client==45.0.4
 confluent-kafka==2.3.0; python_version > '3.0'
 contextlib2==0.6.0.post1; python_version < '3.0'
 cryptography==3.3.2; python_version < '3.0'
-cryptography==41.0.7; python_version > '3.0'
+cryptography==42.0.5; python_version > '3.0'
 ddtrace==0.32.2; sys_platform == 'win32' and python_version < '3.0'
 ddtrace==0.53.2; sys_platform != 'win32' and python_version < '3.0'
 ddtrace==1.11.2; python_version > '3.0'
@@ -48,7 +48,7 @@ oauthlib==3.1.0; python_version < '3.0'
 oauthlib==3.2.2; python_version > '3.0'
 openstacksdk==3.0.0; python_version > '3.0'
 oracledb==1.3.2; python_version >= '3.0'
-orjson==3.9.7; python_version > '3.0'
+orjson==3.9.15; python_version > '3.0'
 packaging==23.2; python_version > '3.0'
 paramiko==2.12.0; python_version < '3.0'
 paramiko==3.4.0; python_version > '3.0'
diff --git a/datadog_checks_base/pyproject.toml b/datadog_checks_base/pyproject.toml
index f983af6163f61f..f45e56cd25e91b 100644
--- a/datadog_checks_base/pyproject.toml
+++ b/datadog_checks_base/pyproject.toml
@@ -43,7 +43,7 @@ deps = [
     "cachetools==5.3.2; python_version > '3.0'",
     "contextlib2==0.6.0.post1; python_version < '3.0'",
     "cryptography==3.3.2; python_version < '3.0'",
-    "cryptography==41.0.7; python_version > '3.0'",
+    "cryptography==42.0.5; python_version > '3.0'",
     "ddtrace==0.32.2; sys_platform == 'win32' and python_version < '3.0'",
     "ddtrace==0.53.2; sys_platform != 'win32' and python_version < '3.0'",
     "ddtrace==1.11.2; python_version > '3.0'",
@@ -89,7 +89,7 @@ http = [
     "win-inet-pton==1.1.0; sys_platform == 'win32' and python_version < '3.0'",
 ]
 json = [
-    "orjson==3.9.7; python_version > '3.0'",
+    "orjson==3.9.15; python_version > '3.0'",
 ]
 kube = [
     "kubernetes==18.20.0; python_version < '3.0'",
diff --git a/http_check/changelog.d/17054.security b/http_check/changelog.d/17054.security
new file mode 100644
index 00000000000000..caf3357b44cad6
--- /dev/null
+++ b/http_check/changelog.d/17054.security
@@ -0,0 +1 @@
+Bump cryptography to 42.0.5
diff --git a/http_check/pyproject.toml b/http_check/pyproject.toml
index 38fc3e24f7dae3..9f5cf77ee8fafa 100644
--- a/http_check/pyproject.toml
+++ b/http_check/pyproject.toml
@@ -40,7 +40,7 @@ license = "BSD-3-Clause"
 [project.optional-dependencies]
 deps = [
     "cryptography==3.3.2; python_version < '3.0'",
-    "cryptography==41.0.7; python_version > '3.0'",
+    "cryptography==42.0.5; python_version > '3.0'",
     "requests-ntlm==1.1.0; python_version < '3.0'",
     "requests-ntlm==1.2.0; python_version > '3.0'",
 ]
diff --git a/mysql/changelog.d/17054.security b/mysql/changelog.d/17054.security
new file mode 100644
index 00000000000000..caf3357b44cad6
--- /dev/null
+++ b/mysql/changelog.d/17054.security
@@ -0,0 +1 @@
+Bump cryptography to 42.0.5
diff --git a/mysql/pyproject.toml b/mysql/pyproject.toml
index 88b73b345c40e0..a92e9bcfb5c071 100644
--- a/mysql/pyproject.toml
+++ b/mysql/pyproject.toml
@@ -40,7 +40,7 @@ deps = [
     "cachetools==3.1.1; python_version < '3.0'",
     "cachetools==5.3.2; python_version > '3.0'",
     "cryptography==3.3.2; python_version < '3.0'",
-    "cryptography==41.0.7; python_version > '3.0'",
+    "cryptography==42.0.5; python_version > '3.0'",
     "pymysql==0.10.1; python_version < '3.0'",
     "pymysql==1.1.0; python_version > '3.0'",
 ]
diff --git a/tls/changelog.d/17054.security b/tls/changelog.d/17054.security
new file mode 100644
index 00000000000000..caf3357b44cad6
--- /dev/null
+++ b/tls/changelog.d/17054.security
@@ -0,0 +1 @@
+Bump cryptography to 42.0.5
diff --git a/tls/pyproject.toml b/tls/pyproject.toml
index b43310bc001ab9..09ae7a4c14c236 100644
--- a/tls/pyproject.toml
+++ b/tls/pyproject.toml
@@ -40,7 +40,7 @@ license = "BSD-3-Clause"
 [project.optional-dependencies]
 deps = [
     "cryptography==3.3.2; python_version < '3.0'",
-    "cryptography==41.0.7; python_version > '3.0'",
+    "cryptography==42.0.5; python_version > '3.0'",
     "ipaddress==1.0.23; python_version < '3.0'",
     "service-identity[idna]==21.1.0; python_version < '3.0'",
     "service-identity[idna]==24.1.0; python_version > '3.0'",