diff --git a/Cargo.lock b/Cargo.lock
index fed7b12..408c083 100644
--- a/Cargo.lock
+++ b/Cargo.lock
@@ -3172,13 +3172,14 @@ checksum = "8ecb6da28b8a351d773b68d5825ac39017e680750f980f3a1a85cd8dd28a47c1"
 
 [[package]]
 name = "url"
-version = "2.5.6"
+version = "2.5.7"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "137a3c834eaf7139b73688502f3f1141a0337c5d8e4d9b536f9b8c796e26a7c4"
+checksum = "08bc136a29a3d1758e07a9cca267be308aeebf5cfd5a10f3f67ab2097683ef5b"
 dependencies = [
  "form_urlencoded",
  "idna",
  "percent-encoding",
+ "serde",
 ]
 
 [[package]]
diff --git a/rpxy-acme/Cargo.toml b/rpxy-acme/Cargo.toml
index 3048f0f..d6382db 100644
--- a/rpxy-acme/Cargo.toml
+++ b/rpxy-acme/Cargo.toml
@@ -14,7 +14,7 @@ publish.workspace = true
 post-quantum = ["rustls-post-quantum"]
 
 [dependencies]
-url = { version = "2.5.6" }
+url = { version = "2.5.7" }
 ahash = "0.8.12"
 thiserror = "2.0.16"
 tracing = "0.1.41"