diff --git a/Cargo.lock b/Cargo.lock
index cf9e7ee8..005bfd15 100644
--- a/Cargo.lock
+++ b/Cargo.lock
@@ -292,9 +292,9 @@ dependencies = [
 
 [[package]]
 name = "brotli"
-version = "6.0.0"
+version = "7.0.0"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "74f7971dbd9326d58187408ab83117d8ac1bb9c17b085fdacd1cf2f598719b6b"
+checksum = "cc97b8f16f944bba54f0433f07e30be199b6dc2bd25937444bbad560bcea29bd"
 dependencies = [
  "alloc-no-stdlib",
  "alloc-stdlib",
diff --git a/crates/cli/Cargo.toml b/crates/cli/Cargo.toml
index 46971a52..0bd12ead 100644
--- a/crates/cli/Cargo.toml
+++ b/crates/cli/Cargo.toml
@@ -17,7 +17,7 @@ experimental_event_loop = []
 [dependencies]
 wizer = { workspace = true }
 anyhow = { workspace = true }
-brotli = "6.0.0"
+brotli = "7.0.0"
 wasmprinter = { version = "0.218.0", optional = true }
 wasmtime = { workspace = true }
 wasmtime-wasi = { workspace = true }
diff --git a/supply-chain/config.toml b/supply-chain/config.toml
index 6f8e088b..0f43c405 100644
--- a/supply-chain/config.toml
+++ b/supply-chain/config.toml
@@ -82,7 +82,7 @@ version = "0.10.4"
 criteria = "safe-to-deploy"
 
 [[exemptions.brotli]]
-version = "6.0.0"
+version = "7.0.0"
 criteria = "safe-to-deploy"
 
 [[exemptions.brotli-decompressor]]