diff --git a/Cargo.lock b/Cargo.lock
index 68da8b3e..5190096f 100644
--- a/Cargo.lock
+++ b/Cargo.lock
@@ -664,7 +664,7 @@ version = "0.0.0"
 dependencies = [
  "async-trait",
  "aws-lc-rs",
- "base64 0.22.1",
+ "base64 0.23.1",
  "cpex",
  "form_urlencoded",
  "praxis-policy-core",
diff --git a/tests/parity/harness/Cargo.toml b/tests/parity/harness/Cargo.toml
index 45d3d170..8c9ff158 100644
--- a/tests/parity/harness/Cargo.toml
+++ b/tests/parity/harness/Cargo.toml
@@ -46,7 +46,7 @@ serde_yaml = { workspace = true }
 # Test-only JWT signing (Ed25519 keys derived from fixed labels) and the
 # mock IdP / CIBA endpoints.
 aws-lc-rs = "1"
-base64 = "0.22"
+base64 = "0.23"
 sha2 = "0.10"
 tiny_http = "0.12"
 form_urlencoded = "1"