diff --git a/Cargo.lock b/Cargo.lock
index 26d7eb8b..bfe10575 100644
--- a/Cargo.lock
+++ b/Cargo.lock
@@ -2077,11 +2077,12 @@ dependencies = [
 
 [[package]]
 name = "serde_json"
-version = "1.0.120"
+version = "1.0.127"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "4e0d21c9a8cae1235ad58a00c11cb40d4b1e5c784f1ef2c537876ed6ffd8b7c5"
+checksum = "8043c06d9f82bd7271361ed64f415fe5e12a77fdb52e573e7f06a516dea329ad"
 dependencies = [
  "itoa",
+ "memchr",
  "ryu",
  "serde",
 ]
diff --git a/core/Cargo.toml b/core/Cargo.toml
index c3aac295..2fc3aa3b 100644
--- a/core/Cargo.toml
+++ b/core/Cargo.toml
@@ -24,7 +24,7 @@ hkdf = "^0.12.4"
 lazy_static = "^1.5"
 rand = "^0.8"
 serde = { version = "^1.0.203", features = ["derive"], optional = true }
-serde_json = { version = "^1.0.120", optional = true }
+serde_json = { version = "^1.0.127", optional = true }
 sha-1 = "^0.10.1"
 sha2 = "^0.10.8"
 subtle = "^2.4"
diff --git a/integration/gcpkms/Cargo.toml b/integration/gcpkms/Cargo.toml
index 6e3a419e..390000bc 100644
--- a/integration/gcpkms/Cargo.toml
+++ b/integration/gcpkms/Cargo.toml
@@ -21,7 +21,7 @@ hyper-rustls = "^0.22.1"
 lazy_static = "^1.5"
 percent-encoding = "^2.3"
 serde = { version = "^1.0", features = ["derive"] }
-serde_json = "^1.0.120"
+serde_json = "^1.0.127"
 tink-core = "^0.2"
 tokio = "^1.16"
 yup-oauth2 = "^5.1"
diff --git a/tests/Cargo.toml b/tests/Cargo.toml
index cb6d8af5..9a6e9c8f 100644
--- a/tests/Cargo.toml
+++ b/tests/Cargo.toml
@@ -19,7 +19,7 @@ p256 = { version = "^0.13.2", features = ["ecdsa", "pkcs8"] }
 rand = "^0.8"
 regex = "^1.10.5"
 serde = { version = "^1.0.203", features = ["derive"] }
-serde_json = "^1.0.120"
+serde_json = "^1.0.127"
 tink-core = { version = "^0.2", features = ["insecure", "json"] }
 tink-aead = "^0.2"
 tink-daead = "^0.2"