diff --git a/Cargo.lock b/Cargo.lock
index d8eceef351a1..ed74303aa21a 100644
--- a/Cargo.lock
+++ b/Cargo.lock
@@ -3270,9 +3270,9 @@ checksum = "d36fab90f82edc3c747f9d438e06cf0a491055896f2a279638bb5beed6c40177"
 
 [[package]]
 name = "handlebars"
-version = "3.5.2"
+version = "4.2.0"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "964d0e99a61fe9b1b347389b77ebf8b7e1587b70293676aaca7d27e59b9073b2"
+checksum = "2483bce82dd3ed52509d0117e4a30a488bd608be250ed7a0185301314239ed31"
 dependencies = [
  "log",
  "pest",
diff --git a/language/diem-tools/writeset-transaction-generator/Cargo.toml b/language/diem-tools/writeset-transaction-generator/Cargo.toml
index 68f8d7cfca94..fe471a1da665 100644
--- a/language/diem-tools/writeset-transaction-generator/Cargo.toml
+++ b/language/diem-tools/writeset-transaction-generator/Cargo.toml
@@ -15,7 +15,7 @@ edition = "2018"
 anyhow = "1.0.38"
 structopt = "0.3.21"
 tempfile = "3.2.0"
-handlebars = "3.5.2"
+handlebars = "4.2.0"
 serde = { version = "1.0.120", default-features = false }
 serde_json = "1.0.61"
 once_cell = "1.4.1"
diff --git a/language/move-prover/Cargo.toml b/language/move-prover/Cargo.toml
index 6cc1c796e1f0..346988662100 100644
--- a/language/move-prover/Cargo.toml
+++ b/language/move-prover/Cargo.toml
@@ -29,7 +29,7 @@ clap = "2.33.3"
 codespan = "0.8.0"
 codespan-reporting = "0.8.0"
 futures = "0.3.12"
-handlebars = "3.5.2"
+handlebars = "4.2.0"
 hex = "0.4.2"
 itertools = "0.10.0"
 log = "0.4.13"