diff --git a/rpxy-acme/Cargo.toml b/rpxy-acme/Cargo.toml
index 903cbb0..1be23d3 100644
--- a/rpxy-acme/Cargo.toml
+++ b/rpxy-acme/Cargo.toml
@@ -14,17 +14,17 @@ publish.workspace = true
 post-quantum = ["rustls-post-quantum"]
 
 [dependencies]
-url = { version = "2.5.3" }
+url = { version = "2.5.4" }
 rustc-hash = "2.0.0"
 thiserror = "2.0.3"
 tracing = "0.1.40"
 async-trait = "0.1.83"
 base64 = "0.22.1"
-aws-lc-rs = { version = "1.11.0", default-features = false, features = [
+aws-lc-rs = { version = "1.11.1", default-features = false, features = [
   "aws-lc-sys",
 ] }
 blocking = "1.6.1"
-rustls = { version = "0.23.17", default-features = false, features = [
+rustls = { version = "0.23.18", default-features = false, features = [
   "std",
   "aws_lc_rs",
 ] }
diff --git a/rpxy-certs/Cargo.toml b/rpxy-certs/Cargo.toml
index cab3243..86d00c5 100644
--- a/rpxy-certs/Cargo.toml
+++ b/rpxy-certs/Cargo.toml
@@ -22,7 +22,7 @@ derive_builder = { version = "0.20.2" }
 thiserror = { version = "2.0.3" }
 hot_reload = { version = "0.1.8" }
 async-trait = { version = "0.1.83" }
-rustls = { version = "0.23.17", default-features = false, features = [
+rustls = { version = "0.23.18", default-features = false, features = [
   "std",
   "aws_lc_rs",
 ] }
diff --git a/rpxy-lib/Cargo.toml b/rpxy-lib/Cargo.toml
index ef42e7c..7ec9ad7 100644
--- a/rpxy-lib/Cargo.toml
+++ b/rpxy-lib/Cargo.toml
@@ -80,7 +80,7 @@ hyper-rustls = { version = "0.27.3", default-features = false, features = [
 # tls and cert management for server
 rpxy-certs = { path = "../rpxy-certs/", default-features = false }
 hot_reload = "0.1.8"
-rustls = { version = "0.23.17", default-features = false }
+rustls = { version = "0.23.18", default-features = false }
 rustls-post-quantum = { version = "0.1.0", optional = true }
 tokio-rustls = { version = "0.26.0", features = ["early-data"] }