diff --git a/Cargo.lock b/Cargo.lock
index 26d7eb8b..9ae0287d 100644
--- a/Cargo.lock
+++ b/Cargo.lock
@@ -2057,18 +2057,18 @@ checksum = "58bc9567378fc7690d6b2addae4e60ac2eeea07becb2c64b9f218b53865cba2a"
 
 [[package]]
 name = "serde"
-version = "1.0.203"
+version = "1.0.209"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "7253ab4de971e72fb7be983802300c30b5a7f0c2e56fab8abfc6a214307c0094"
+checksum = "99fce0ffe7310761ca6bf9faf5115afbc19688edd00171d81b1bb1b116c63e09"
 dependencies = [
  "serde_derive",
 ]
 
 [[package]]
 name = "serde_derive"
-version = "1.0.203"
+version = "1.0.209"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "500cbc0ebeb6f46627f50f3f5811ccf6bf00643be300b4c3eabc0ef55dc5b5ba"
+checksum = "a5831b979fd7b5439637af1752d535ff49f4860c0f341d1baeb6faf0f4242170"
 dependencies = [
  "proc-macro2",
  "quote",
diff --git a/core/Cargo.toml b/core/Cargo.toml
index c3aac295..b92238fa 100644
--- a/core/Cargo.toml
+++ b/core/Cargo.toml
@@ -23,7 +23,7 @@ digest = "^0.10.7"
 hkdf = "^0.12.4"
 lazy_static = "^1.5"
 rand = "^0.8"
-serde = { version = "^1.0.203", features = ["derive"], optional = true }
+serde = { version = "^1.0.209", features = ["derive"], optional = true }
 serde_json = { version = "^1.0.120", optional = true }
 sha-1 = "^0.10.1"
 sha2 = "^0.10.8"
diff --git a/proto/Cargo.toml b/proto/Cargo.toml
index 47cdf12b..388306ec 100644
--- a/proto/Cargo.toml
+++ b/proto/Cargo.toml
@@ -19,7 +19,7 @@ json = ["base64", "serde"]
 [dependencies]
 base64 = { version = "^0.21", optional = true }
 prost = "^0.11"
-serde = { version = "^1.0.203", features = ["derive"], optional = true }
+serde = { version = "^1.0.209", features = ["derive"], optional = true }
 
 [build-dependencies]
 prost-build = "^0.11"
diff --git a/tests/Cargo.toml b/tests/Cargo.toml
index cb6d8af5..95f16361 100644
--- a/tests/Cargo.toml
+++ b/tests/Cargo.toml
@@ -18,7 +18,7 @@ hex = "^0.4.3"
 p256 = { version = "^0.13.2", features = ["ecdsa", "pkcs8"] }
 rand = "^0.8"
 regex = "^1.10.5"
-serde = { version = "^1.0.203", features = ["derive"] }
+serde = { version = "^1.0.209", features = ["derive"] }
 serde_json = "^1.0.120"
 tink-core = { version = "^0.2", features = ["insecure", "json"] }
 tink-aead = "^0.2"