diff --git a/Cargo.lock b/Cargo.lock
index 078af0c0758..0525bd3f329 100644
--- a/Cargo.lock
+++ b/Cargo.lock
@@ -2525,9 +2525,9 @@ checksum = "00b0228411908ca8685dba7fc2cdd70ec9990a6e753e89b6ac91a84c40fbaf4b"
 
 [[package]]
 name = "form_urlencoded"
-version = "1.2.1"
+version = "1.2.2"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "e13624c2627564efccf4934284bdd98cbaa14e79b0b5a141218e507b3a823456"
+checksum = "cb4cb245038516f5f85277875cdaa4f7d2c9a0fa0468de06ed190163b1581fcf"
 dependencies = [
  "percent-encoding",
 ]
@@ -3290,9 +3290,9 @@ checksum = "b9e0384b61958566e926dc50660321d12159025e767c18e043daf26b70104c39"
 
 [[package]]
 name = "idna"
-version = "1.0.3"
+version = "1.1.0"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "686f825264d630750a544639377bae737628043f20d38bbc029e8f29ea968a7e"
+checksum = "3b0875f23caa03898994f6ddc501886a45c7d3d62d04d2d90788d47be1b1e4de"
 dependencies = [
  "idna_adapter",
  "smallvec",
@@ -6391,9 +6391,9 @@ dependencies = [
 
 [[package]]
 name = "url"
-version = "2.5.4"
+version = "2.5.7"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "32f8b686cadd1473f4bd0117a5d28d36b1ade384ea9b5069a1c40aefed7fda60"
+checksum = "08bc136a29a3d1758e07a9cca267be308aeebf5cfd5a10f3f67ab2097683ef5b"
 dependencies = [
  "form_urlencoded",
  "idna",
diff --git a/Cargo.toml b/Cargo.toml
index 2a894b6593c..660ff216b00 100644
--- a/Cargo.toml
+++ b/Cargo.toml
@@ -134,7 +134,7 @@ tower-http = { version = "=0.6.6", features = ["add-extension", "fs", "catch-pan
 tracing = "=0.1.41"
 tracing-subscriber = { version = "=0.3.19", features = ["env-filter", "json"] }
 typomania = { version = "=0.1.2", default-features = false }
-url = "=2.5.4"
+url = "=2.5.7"
 utoipa = { version = "=5.4.0", features = ["chrono"] }
 utoipa-axum = "=0.2.0"
 
diff --git a/crates/crates_io_docs_rs/Cargo.toml b/crates/crates_io_docs_rs/Cargo.toml
index 8923c1fbb4e..2e906b6f143 100644
--- a/crates/crates_io_docs_rs/Cargo.toml
+++ b/crates/crates_io_docs_rs/Cargo.toml
@@ -20,7 +20,7 @@ reqwest = { version = "=0.12.23", features = ["json"] }
 serde = { version = "=1.0.219", features = ["derive"] }
 thiserror = "=2.0.16"
 tracing = "=0.1.41"
-url = "=2.5.4"
+url = "=2.5.7"
 
 [dev-dependencies]
 claims = "=0.8.0"
diff --git a/crates/crates_io_index/Cargo.toml b/crates/crates_io_index/Cargo.toml
index 7ac47d14bd8..e62ea0d947a 100644
--- a/crates/crates_io_index/Cargo.toml
+++ b/crates/crates_io_index/Cargo.toml
@@ -25,7 +25,7 @@ serde = { version = "=1.0.219", features = ["derive"] }
 serde_json = "=1.0.143"
 tempfile = "=3.21.0"
 tracing = "=0.1.41"
-url = "=2.5.4"
+url = "=2.5.7"
 
 [dev-dependencies]
 claims = "=0.8.0"
diff --git a/crates/crates_io_markdown/Cargo.toml b/crates/crates_io_markdown/Cargo.toml
index 87926c8e312..a80e13d37b8 100644
--- a/crates/crates_io_markdown/Cargo.toml
+++ b/crates/crates_io_markdown/Cargo.toml
@@ -16,7 +16,7 @@ path = "lib.rs"
 ammonia = "=4.1.1"
 comrak = { version = "=0.41.0", default-features = false, features = ["bon"] }
 htmlescape = "=0.3.1"
-url = "=2.5.4"
+url = "=2.5.7"
 
 [dev-dependencies]
 insta = "=1.43.1"
diff --git a/crates/crates_io_test_db/Cargo.toml b/crates/crates_io_test_db/Cargo.toml
index dd0e21bcfc4..7cc397b45a3 100644
--- a/crates/crates_io_test_db/Cargo.toml
+++ b/crates/crates_io_test_db/Cargo.toml
@@ -14,4 +14,4 @@ diesel-async = { version = "=0.6.1", features = ["postgres"] }
 diesel_migrations = { version = "=2.2.0", features = ["postgres"] }
 rand = "=0.9.2"
 tracing = "=0.1.41"
-url = "=2.5.4"
+url = "=2.5.7"