diff --git a/Cargo.lock b/Cargo.lock
index 5fb8498..7cea183 100644
--- a/Cargo.lock
+++ b/Cargo.lock
@@ -19,9 +19,9 @@ checksum = "f2032f911046de80f0a198e0901378627c33f59ea0ac00e363d481118bd70a53"
 
 [[package]]
 name = "base64"
-version = "0.22.1"
+version = "0.23.0"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "72b3254f16251a8381aa12e40e3c4d2f0199f8c6508fbecb9d91f575e0fbb8c6"
+checksum = "b25655df2c3cdd83c5e5b293b88acd880332b2ddadd7c30ac43144fdc0033da9"
 
 [[package]]
 name = "bindgen"
diff --git a/Cargo.toml b/Cargo.toml
index ee196fe..f7e9bb6 100644
--- a/Cargo.toml
+++ b/Cargo.toml
@@ -30,7 +30,7 @@ sha2 = { version = "0.11", default-features = false, optional = true }
 # onto the newline-delimited JSON wire format that talks to the in-guest
 # daemon. The crate is the de-facto pure-Rust base64 implementation; gated
 # on `firecracker` so the no-feature default build pulls nothing extra.
-base64 = { version = "0.22", default-features = false, features = ["std"], optional = true }
+base64 = { version = "0.23", default-features = false, features = ["std"], optional = true }
 
 # `libc` is only pulled in on Linux. Used by:
 # - `shutdown::graceful_shutdown` to call `kill(2)` with `SIGTERM` directly
@@ -57,7 +57,7 @@ tempfile = "3"
 # kernel's vsock interface directly.
 [target.'cfg(target_os = "linux")'.dev-dependencies]
 vsock = "0.5"
-base64 = { version = "0.22", default-features = false, features = ["std"] }
+base64 = { version = "0.23", default-features = false, features = ["std"] }
 
 [features]
 default = []