diff --git a/Cargo.lock b/Cargo.lock
index d07e0e5..f218675 100644
--- a/Cargo.lock
+++ b/Cargo.lock
@@ -1667,7 +1667,7 @@ dependencies = [
 name = "pam-prmana"
 version = "0.1.0"
 dependencies = [
- "base64 0.21.7",
+ "base64 0.22.1",
  "chrono",
  "clap",
  "data-encoding",
@@ -1910,7 +1910,7 @@ name = "prmana-agent"
 version = "0.1.0"
 dependencies = [
  "anyhow",
- "base64 0.21.7",
+ "base64 0.22.1",
  "clap",
  "cryptoki",
  "directories",
diff --git a/pam-prmana/Cargo.toml b/pam-prmana/Cargo.toml
index 8f4ed48..31823cf 100644
--- a/pam-prmana/Cargo.toml
+++ b/pam-prmana/Cargo.toml
@@ -42,7 +42,7 @@ url = "2.5"
 chrono = { version = "0.4", features = ["serde"] }
 once_cell = "1.19"
 moka = { version = "0.12", features = ["sync"] }
-base64 = "0.21"
+base64 = "0.22"
 uzers = "0.12"
 syslog = "6.1"
 figment = { version = "0.10", features = ["yaml", "env"] }
diff --git a/prmana-agent/Cargo.toml b/prmana-agent/Cargo.toml
index 5cbf6a2..5d378c4 100644
--- a/prmana-agent/Cargo.toml
+++ b/prmana-agent/Cargo.toml
@@ -17,7 +17,7 @@ path = "src/main.rs"
 # `jwk` features are all that is needed.
 p256 = { version = "0.13", features = ["ecdsa", "jwk"] }
 sha2 = "0.10"
-base64 = "0.21"
+base64 = "0.22"
 # MEM-01/MEM-02: zeroize for Zeroizing<T> wrapper; ZeroizeOnDrop already implemented
 # unconditionally by ecdsa-0.16's SigningKey. secrecy is added for Plan 02+ usage.
 zeroize = { version = "1", features = ["derive"] }