diff --git a/Cargo.lock b/Cargo.lock
index 92188505282..c5f46958ff4 100644
--- a/Cargo.lock
+++ b/Cargo.lock
@@ -1236,7 +1236,7 @@ dependencies = [
  "paste",
  "postgres-native-tls",
  "prometheus",
- "rand 0.9.0",
+ "rand 0.9.1",
  "regex",
  "reqwest",
  "rss",
@@ -1303,7 +1303,7 @@ dependencies = [
  "futures-util",
  "googletest",
  "insta",
- "rand 0.9.0",
+ "rand 0.9.1",
  "secrecy",
  "semver",
  "serde",
@@ -1435,7 +1435,7 @@ dependencies = [
  "bytes",
  "clap",
  "crates_io_index",
- "rand 0.9.0",
+ "rand 0.9.1",
  "reqwest",
  "secrecy",
  "semver",
@@ -1493,7 +1493,7 @@ dependencies = [
  "diesel",
  "diesel-async",
  "diesel_migrations",
- "rand 0.9.0",
+ "rand 0.9.1",
  "tracing",
  "url",
 ]
@@ -4008,7 +4008,7 @@ dependencies = [
  "hmac",
  "md-5",
  "memchr",
- "rand 0.9.0",
+ "rand 0.9.1",
  "sha2",
  "stringprep",
 ]
@@ -4233,13 +4233,12 @@ dependencies = [
 
 [[package]]
 name = "rand"
-version = "0.9.0"
+version = "0.9.1"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "3779b94aeb87e8bd4e834cee3650289ee9e0d5677f976ecdb6d219e5f4f6cd94"
+checksum = "9fbfd9d094a40bf3ae768db9361049ace4c0e04a4fd6b359518bd7b73a73dd97"
 dependencies = [
  "rand_chacha 0.9.0",
  "rand_core 0.9.0",
- "zerocopy 0.8.14",
 ]
 
 [[package]]
@@ -5455,7 +5454,7 @@ dependencies = [
  "pin-project-lite",
  "postgres-protocol",
  "postgres-types",
- "rand 0.9.0",
+ "rand 0.9.1",
  "socket2",
  "tokio",
  "tokio-util",
diff --git a/Cargo.toml b/Cargo.toml
index 001fdda0be0..480458da3ba 100644
--- a/Cargo.toml
+++ b/Cargo.toml
@@ -108,7 +108,7 @@ parking_lot = "=0.12.3"
 paste = "=1.0.15"
 postgres-native-tls = "=0.5.1"
 prometheus = { version = "=0.14.0", default-features = false }
-rand = "=0.9.0"
+rand = "=0.9.1"
 reqwest = { version = "=0.12.15", features = ["gzip", "json"] }
 rss = { version = "=2.0.12", default-features = false, features = ["atom"] }
 secrecy = "=0.10.3"
diff --git a/crates/crates_io_database/Cargo.toml b/crates/crates_io_database/Cargo.toml
index fb83f7f43f0..a73a55c7cb8 100644
--- a/crates/crates_io_database/Cargo.toml
+++ b/crates/crates_io_database/Cargo.toml
@@ -16,7 +16,7 @@ diesel = { version = "=2.2.9", features = ["serde_json", "chrono", "numeric"] }
 diesel-async = "=0.5.2"
 diesel_full_text_search = "=2.2.0"
 futures-util = "=0.3.31"
-rand = "=0.9.0"
+rand = "=0.9.1"
 secrecy = "=0.10.3"
 semver = { version = "=1.0.26", features = ["serde"] }
 serde = { version = "=1.0.219", features = ["derive"] }
diff --git a/crates/crates_io_smoke_test/Cargo.toml b/crates/crates_io_smoke_test/Cargo.toml
index 9ecc21a7e95..e912443bd5d 100644
--- a/crates/crates_io_smoke_test/Cargo.toml
+++ b/crates/crates_io_smoke_test/Cargo.toml
@@ -12,7 +12,7 @@ anyhow = "=1.0.98"
 bytes = "=1.10.1"
 clap = { version = "=4.5.36", features = ["derive", "env", "unicode", "wrap_help"] }
 crates_io_index = { path = "../crates_io_index" }
-rand = "=0.9.0"
+rand = "=0.9.1"
 reqwest = { version = "=0.12.15", features = ["gzip", "json"] }
 secrecy = "=0.10.3"
 semver = { version = "=1.0.26", features = ["serde"] }
diff --git a/crates/crates_io_test_db/Cargo.toml b/crates/crates_io_test_db/Cargo.toml
index 58be22a02c6..dd88738f3e4 100644
--- a/crates/crates_io_test_db/Cargo.toml
+++ b/crates/crates_io_test_db/Cargo.toml
@@ -12,6 +12,6 @@ crates_io_env_vars = { path = "../crates_io_env_vars" }
 diesel = { version = "=2.2.9", features = ["postgres", "r2d2"] }
 diesel-async = { version = "=0.5.2", features = ["postgres"] }
 diesel_migrations = { version = "=2.2.0", features = ["postgres"] }
-rand = "=0.9.0"
+rand = "=0.9.1"
 tracing = "=0.1.41"
 url = "=2.5.4"