diff --git a/Cargo.lock b/Cargo.lock
index db6ceab37..9f5b5eb5a 100644
--- a/Cargo.lock
+++ b/Cargo.lock
@@ -685,9 +685,9 @@ checksum = "72b3254f16251a8381aa12e40e3c4d2f0199f8c6508fbecb9d91f575e0fbb8c6"
 
 [[package]]
 name = "base64ct"
-version = "1.6.0"
+version = "1.7.3"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "8c3c1a368f70d6cf7302d78f8f7093da241fb8e8807c05cc9e51a125895a6d5b"
+checksum = "89e25b6adfb930f02d1981565a6e5d9c547ac15a96606256d3b59040e5cd4ca3"
 
 [[package]]
 name = "bcrypt"
diff --git a/Cargo.toml b/Cargo.toml
index 037372d51..0f5dbbe08 100644
--- a/Cargo.toml
+++ b/Cargo.toml
@@ -93,7 +93,7 @@ features = ["cookie-private", "cookie-key-expansion", "typed-header"]
 
 # Constant-time base64
 [workspace.dependencies.base64ct]
-version = "1.6.0"
+version = "1.7.3"
 
 # Packed bitfields
 [workspace.dependencies.bitflags]
diff --git a/crates/jose/Cargo.toml b/crates/jose/Cargo.toml
index 73df623f9..b84ba413b 100644
--- a/crates/jose/Cargo.toml
+++ b/crates/jose/Cargo.toml
@@ -12,7 +12,7 @@ repository.workspace = true
 workspace = true
 
 [dependencies]
-base64ct = { version = "1.6.0", features = ["std"] }
+base64ct = { version = "1.7.3", features = ["std"] }
 chrono.workspace = true
 digest = "0.10.7"
 ecdsa = { version = "0.16.9", features = ["signing", "verifying"] }
diff --git a/crates/keystore/Cargo.toml b/crates/keystore/Cargo.toml
index 7043cc84e..814ed860e 100644
--- a/crates/keystore/Cargo.toml
+++ b/crates/keystore/Cargo.toml
@@ -29,7 +29,7 @@ spki = { version = "0.7.3", features = ["std"] }
 thiserror.workspace = true
 generic-array = "0.14.7"
 chacha20poly1305 = { version = "0.10.1", features = ["std"] }
-base64ct = "1.6.0"
+base64ct = "1.7.3"
 
 mas-iana.workspace = true
 mas-jose.workspace = true
diff --git a/crates/oidc-client/Cargo.toml b/crates/oidc-client/Cargo.toml
index fbabc18bf..df549b588 100644
--- a/crates/oidc-client/Cargo.toml
+++ b/crates/oidc-client/Cargo.toml
@@ -13,7 +13,7 @@ workspace = true
 
 [dependencies]
 async-trait.workspace = true
-base64ct = { version = "1.6.0", features = ["std"] }
+base64ct = { version = "1.7.3", features = ["std"] }
 chrono.workspace = true
 elliptic-curve.workspace = true
 form_urlencoded = "1.2.1"