diff --git a/Cargo.lock b/Cargo.lock
index 8179f1ce6..e3f140dda 100644
--- a/Cargo.lock
+++ b/Cargo.lock
@@ -1208,9 +1208,9 @@ dependencies = [
 
 [[package]]
 name = "rsa"
-version = "0.9.4"
+version = "0.9.6"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "6a3211b01eea83d80687da9eef70e39d65144a3894866a5153a2723e425a157f"
+checksum = "5d0e5124fcb30e76a7e79bfee683a2746db83784b86289f6251b54b7950a0dfc"
 dependencies = [
  "const-oid 0.9.5",
  "digest",
diff --git a/cms/Cargo.toml b/cms/Cargo.toml
index 2729b3512..4eafbc544 100644
--- a/cms/Cargo.toml
+++ b/cms/Cargo.toml
@@ -23,7 +23,7 @@ const-oid = { version = "0.9.4", features = ["db"] } # TODO: path = "../const-oi
 aes = { version = "0.8.2", optional = true }
 cbc = { version = "0.1.2", optional = true }
 cipher = { version = "0.4.4", features = ["alloc", "block-padding", "rand_core"], optional = true }
-rsa = { version = "0.9.3", optional = true }
+rsa = { version = "0.9.6", optional = true }
 sha1 = { version = "0.10", optional = true }
 sha2 = { version = "0.10", optional = true }
 sha3 = { version = "0.10", optional = true }
@@ -36,7 +36,7 @@ hex-literal = "0.4"
 pem-rfc7468 = "0.7.0"
 pkcs5 = { version = "0.7" }
 rand = { version = "0.8.5" }
-rsa = { version = "0.9.3", features = ["sha2"] }
+rsa = { version = "0.9.6", features = ["sha2"] }
 ecdsa = { version = "0.16.8", features = ["digest", "pem"] }
 p256 = "0.13.0"
 
diff --git a/x509-cert/Cargo.toml b/x509-cert/Cargo.toml
index 033f48b3a..db90e00d0 100644
--- a/x509-cert/Cargo.toml
+++ b/x509-cert/Cargo.toml
@@ -27,7 +27,7 @@ signature = { version = "2.1.0", features = ["rand_core"], optional = true }
 [dev-dependencies]
 hex-literal = "0.4"
 rand = "0.8.5"
-rsa = { version = "0.9.3", features = ["sha2"] }
+rsa = { version = "0.9.6", features = ["sha2"] }
 ecdsa = { version = "0.16.8", features = ["digest", "pem"] }
 p256 = "0.13.0"
 rstest = "0.18"