diff --git a/Cargo.lock b/Cargo.lock
index 4ae851c3..cd1f981a 100644
--- a/Cargo.lock
+++ b/Cargo.lock
@@ -113,6 +113,12 @@ version = "0.22.1"
 source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "72b3254f16251a8381aa12e40e3c4d2f0199f8c6508fbecb9d91f575e0fbb8c6"
 
+[[package]]
+name = "base64"
+version = "0.23.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "b25655df2c3cdd83c5e5b293b88acd880332b2ddadd7c30ac43144fdc0033da9"
+
 [[package]]
 name = "base64ct"
 version = "1.8.3"
@@ -852,7 +858,7 @@ version = "0.1.20"
 source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "96547c2556ec9d12fb1578c4eaf448b04993e7fb79cbaad930a656880a6bdfa0"
 dependencies = [
- "base64",
+ "base64 0.22.1",
  "bytes",
  "futures-channel",
  "futures-util",
@@ -1258,7 +1264,7 @@ dependencies = [
  "aes-gcm",
  "aes-kw",
  "argon2",
- "base64",
+ "base64 0.23.0",
  "bcrypt-pbkdf",
  "blake2",
  "byteorder",
@@ -1326,7 +1332,7 @@ dependencies = [
 name = "picky-asn1-der"
 version = "0.5.6"
 dependencies = [
- "base64",
+ "base64 0.23.0",
  "crypto-bigint",
  "oid",
  "picky-asn1",
@@ -1339,7 +1345,7 @@ dependencies = [
 name = "picky-asn1-x509"
 version = "0.15.4"
 dependencies = [
- "base64",
+ "base64 0.23.0",
  "crypto-bigint",
  "expect-test",
  "hex",
@@ -1612,7 +1618,7 @@ version = "0.13.4"
 source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "219c5811de6525e5416c7d5d53bb656d3afdbc6c5af816e0802bcfa42dbdc1c3"
 dependencies = [
- "base64",
+ "base64 0.22.1",
  "bytes",
  "futures-channel",
  "futures-core",
diff --git a/picky-asn1-der/Cargo.toml b/picky-asn1-der/Cargo.toml
index d650b26a..b9ab271a 100644
--- a/picky-asn1-der/Cargo.toml
+++ b/picky-asn1-der/Cargo.toml
@@ -22,7 +22,7 @@ serde = { version = "1", default-features = false, features = ["derive"] }
 serde_bytes = "0.11"
 
 [dev-dependencies]
-base64 = "0.22"
+base64 = "0.23"
 pretty_assertions = "1.4"
 serde_bytes = "0.11"
 crypto-bigint = { version = "0.7", default-features = false, features = ["alloc"] }
diff --git a/picky-asn1-x509/Cargo.toml b/picky-asn1-x509/Cargo.toml
index 99c410d8..31004502 100644
--- a/picky-asn1-x509/Cargo.toml
+++ b/picky-asn1-x509/Cargo.toml
@@ -21,7 +21,7 @@ picky-asn1 = { version = "0.10", path = "../picky-asn1" }
 picky-asn1-der = { version = "0.5", path = "../picky-asn1-der" }
 serde = { version = "1", features = ["derive"] }
 oid = { version = "0.2", features = ["serde_support"] }
-base64 = "0.22"
+base64 = "0.23"
 crypto-bigint = { version = "0.7", optional = true, features = ["alloc"], default-features = false }
 widestring = { version = "1.1", default-features = false, features = ["alloc"], optional = true }
 zeroize = { version = "1.8", optional = true }
diff --git a/picky/Cargo.toml b/picky/Cargo.toml
index aa44cdfa..cac877c5 100644
--- a/picky/Cargo.toml
+++ b/picky/Cargo.toml
@@ -25,7 +25,7 @@ picky-asn1 = { version = "0.10", path = "../picky-asn1", features = ["zeroize"]
 picky-asn1-der = { version = "0.5", path = "../picky-asn1-der" }
 picky-asn1-x509 = { version = "0.15", path = "../picky-asn1-x509", features = ["legacy", "zeroize"] }
 serde = { version = "1", features = ["derive"] }
-base64 = "0.22"
+base64 = "0.23"
 thiserror = "2"
 byteorder = { version = "1.5", optional = true }
 chrono = { version = "0.4", default-features = false, features = ["clock"], optional = true }