diff --git a/Cargo.lock b/Cargo.lock
index 586100502..7e5de1b0a 100644
--- a/Cargo.lock
+++ b/Cargo.lock
@@ -2811,6 +2811,15 @@ name = "ipnetwork"
 version = "0.20.0"
 source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "bf466541e9d546596ee94f9f69590f89473455f88372423e0008fc1a7daf100e"
+dependencies = [
+ "serde",
+]
+
+[[package]]
+name = "ipnetwork"
+version = "0.21.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "2f7d1e51dceb94e362a3bd4849c5b8b44989faf8b66998fc0a44ff11923393c9"
 dependencies = [
  "schemars",
  "serde",
@@ -3157,7 +3166,7 @@ dependencies = [
  "http-body-util",
  "httpdate",
  "hyper",
- "ipnetwork",
+ "ipnetwork 0.21.0",
  "itertools 0.13.0",
  "listenfd",
  "mas-config",
@@ -3223,7 +3232,7 @@ dependencies = [
  "figment",
  "governor",
  "indoc",
- "ipnetwork",
+ "ipnetwork 0.21.0",
  "lettre",
  "mas-iana",
  "mas-jose",
@@ -5870,7 +5879,7 @@ dependencies = [
  "hashbrown 0.15.2",
  "hashlink",
  "indexmap 2.7.0",
- "ipnetwork",
+ "ipnetwork 0.20.0",
  "log",
  "memchr",
  "once_cell",
@@ -5994,7 +6003,7 @@ dependencies = [
  "hkdf",
  "hmac",
  "home",
- "ipnetwork",
+ "ipnetwork 0.20.0",
  "itoa",
  "log",
  "md-5",
diff --git a/crates/cli/Cargo.toml b/crates/cli/Cargo.toml
index acebbc56c..b77cc9f3b 100644
--- a/crates/cli/Cargo.toml
+++ b/crates/cli/Cargo.toml
@@ -28,7 +28,7 @@ http.workspace = true
 http-body.workspace = true
 http-body-util.workspace = true
 hyper.workspace = true
-ipnetwork = "0.20.0"
+ipnetwork = "0.21.0"
 itertools = "0.13.0"
 listenfd = "1.0.1"
 rand.workspace = true
diff --git a/crates/config/Cargo.toml b/crates/config/Cargo.toml
index 6bba7a6a4..2224293dc 100644
--- a/crates/config/Cargo.toml
+++ b/crates/config/Cargo.toml
@@ -21,7 +21,7 @@ anyhow.workspace = true
 camino = { workspace = true, features = ["serde1"] }
 chrono.workspace = true
 figment.workspace = true
-ipnetwork = { version = "0.20.0", features = ["serde", "schemars"] }
+ipnetwork = { version = "0.21.0", features = ["serde", "schemars"] }
 lettre.workspace = true
 schemars.workspace = true
 ulid.workspace = true