diff --git a/Cargo.lock b/Cargo.lock
index 0b0e8853fe8..cc893b3841b 100644
--- a/Cargo.lock
+++ b/Cargo.lock
@@ -5461,9 +5461,9 @@ dependencies = [
 
 [[package]]
 name = "url"
-version = "2.5.3"
+version = "2.5.4"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "8d157f1b96d14500ffdc1f10ba712e780825526c03d9a49b4d0324b0d9113ada"
+checksum = "32f8b686cadd1473f4bd0117a5d28d36b1ade384ea9b5069a1c40aefed7fda60"
 dependencies = [
  "form_urlencoded",
  "idna",
diff --git a/Cargo.toml b/Cargo.toml
index 0980524dd70..021024d70ce 100644
--- a/Cargo.toml
+++ b/Cargo.toml
@@ -120,7 +120,7 @@ tower-http = { version = "=0.6.2", features = ["add-extension", "fs", "catch-pan
 tracing = "=0.1.40"
 tracing-subscriber = { version = "=0.3.18", features = ["env-filter", "json"] }
 typomania = { version = "=0.1.2", default-features = false }
-url = "=2.5.3"
+url = "=2.5.4"
 unicode-xid = "=0.2.6"
 
 [dev-dependencies]
diff --git a/crates/crates_io_index/Cargo.toml b/crates/crates_io_index/Cargo.toml
index dce35a93f20..f012b95bd87 100644
--- a/crates/crates_io_index/Cargo.toml
+++ b/crates/crates_io_index/Cargo.toml
@@ -25,7 +25,7 @@ serde = { version = "=1.0.215", features = ["derive"] }
 serde_json = "=1.0.133"
 tempfile = "=3.14.0"
 tracing = "=0.1.40"
-url = "=2.5.3"
+url = "=2.5.4"
 
 [dev-dependencies]
 claims = "=0.8.0"
diff --git a/crates/crates_io_markdown/Cargo.toml b/crates/crates_io_markdown/Cargo.toml
index 416712c4abb..dcc09f8e543 100644
--- a/crates/crates_io_markdown/Cargo.toml
+++ b/crates/crates_io_markdown/Cargo.toml
@@ -16,7 +16,7 @@ path = "lib.rs"
 ammonia = "=4.0.0"
 comrak = { version = "=0.30.0", default-features = false }
 htmlescape = "=0.3.1"
-url = "=2.5.3"
+url = "=2.5.4"
 
 [dev-dependencies]
 insta = "=1.41.1"
diff --git a/crates/crates_io_test_db/Cargo.toml b/crates/crates_io_test_db/Cargo.toml
index 8de1768741e..624c0ef65e6 100644
--- a/crates/crates_io_test_db/Cargo.toml
+++ b/crates/crates_io_test_db/Cargo.toml
@@ -14,4 +14,4 @@ diesel-async = { version = "=0.5.1", features = ["postgres"] }
 diesel_migrations = { version = "=2.2.0", features = ["postgres"] }
 rand = "=0.8.5"
 tracing = "=0.1.40"
-url = "=2.5.3"
+url = "=2.5.4"