diff --git a/Cargo.lock b/Cargo.lock
index 0efce4362..a412a5c28 100644
--- a/Cargo.lock
+++ b/Cargo.lock
@@ -5455,9 +5455,9 @@ dependencies = [
 
 [[package]]
 name = "rsa"
-version = "0.9.9"
+version = "0.9.10"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "40a0376c50d0358279d9d643e4bf7b7be212f1f4ff1da9070a7b54d22ef75c88"
+checksum = "b8573f03f5883dcaebdfcf4725caa1ecb9c15b2ef50c43a07b816e06799bb12d"
 dependencies = [
  "const-oid",
  "digest",
diff --git a/cli/Cargo.toml b/cli/Cargo.toml
index d5bebcb6e..f2e79aa07 100644
--- a/cli/Cargo.toml
+++ b/cli/Cargo.toml
@@ -62,7 +62,7 @@ reqwest = { version = "0.12.7", features = [
   "rustls-tls-native-roots",
   "rustls-tls-webpki-roots",
 ], default-features = false }
-rsa = { version = "0.9.2", features = ["sha2"] }
+rsa = { version = "0.9.10", features = ["sha2"] }
 serde_json = "1.0.85"
 # The derived `swc_ecma_ast` dependency will not compile with `serde` v1.0.220 or above.
 # Ref: https://github.com/swc-project/swc/issues/11092