diff --git a/webpack.config.js b/webpack.config.js
index 0840451c59..28d60af8a7 100644
--- a/webpack.config.js
+++ b/webpack.config.js
@@ -9,6 +9,12 @@ const TerserPlugin = require("terser-webpack-plugin");
 const OptimizeCSSAssetsPlugin = require("optimize-css-assets-webpack-plugin");
 const HtmlWebpackInjectPreload = require("@principalstudio/html-webpack-inject-preload");
 const SentryCliPlugin = require("@sentry/webpack-plugin");
+const crypto = require("crypto");
+
+// XXX: mangle Crypto::createHash to replace md4 with sha256, output.hashFunction is insufficient as multiple bits
+// of webpack hardcode md4. The proper fix it to upgrade to webpack 5.
+const createHash = crypto.createHash;
+crypto.createHash = (algorithm, options) => createHash(algorithm === "md4" ? "sha256" : algorithm, options);
 
 // Environment variables
 // RIOT_OG_IMAGE_URL: specifies the URL to the image which should be used for the opengraph logo.