diff --git a/Cargo.lock b/Cargo.lock
index d444e2c..2159498 100644
--- a/Cargo.lock
+++ b/Cargo.lock
@@ -1225,7 +1225,7 @@ dependencies = [
  "libc",
  "percent-encoding",
  "pin-project-lite",
- "socket2 0.5.10",
+ "socket2 0.6.0",
  "system-configuration",
  "tokio",
  "tower-service",
@@ -2275,9 +2275,9 @@ dependencies = [
 
 [[package]]
 name = "rustls"
-version = "0.23.30"
+version = "0.23.31"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "069a8df149a16b1a12dcc31497c3396a173844be3cac4bd40c9e7671fef96671"
+checksum = "c0ebcbd2f03de0fc1122ad9bb24b127a5a6cd51d72604a3f3c50ac459762b6cc"
 dependencies = [
  "aws-lc-rs",
  "log",
diff --git a/rpxy-acme/Cargo.toml b/rpxy-acme/Cargo.toml
index f0d27ab..3c40f38 100644
--- a/rpxy-acme/Cargo.toml
+++ b/rpxy-acme/Cargo.toml
@@ -24,7 +24,7 @@ aws-lc-rs = { version = "1.13.3", default-features = false, features = [
   "aws-lc-sys",
 ] }
 blocking = "1.6.2"
-rustls = { version = "0.23.30", default-features = false, features = [
+rustls = { version = "0.23.31", default-features = false, features = [
   "std",
   "aws_lc_rs",
 ] }
diff --git a/rpxy-certs/Cargo.toml b/rpxy-certs/Cargo.toml
index 13c7202..2b4587a 100644
--- a/rpxy-certs/Cargo.toml
+++ b/rpxy-certs/Cargo.toml
@@ -22,7 +22,7 @@ derive_builder = { version = "0.20.2" }
 thiserror = { version = "2.0.12" }
 hot_reload = { version = "0.2.0" }
 async-trait = { version = "0.1.88" }
-rustls = { version = "0.23.30", default-features = false, features = [
+rustls = { version = "0.23.31", default-features = false, features = [
   "std",
   "aws_lc_rs",
 ] }
diff --git a/rpxy-lib/Cargo.toml b/rpxy-lib/Cargo.toml
index cbcd0d5..e04f21f 100644
--- a/rpxy-lib/Cargo.toml
+++ b/rpxy-lib/Cargo.toml
@@ -80,7 +80,7 @@ hyper-rustls = { version = "0.27.7", default-features = false, features = [
 # tls and cert management for server
 rpxy-certs = { path = "../rpxy-certs/", default-features = false }
 hot_reload = "0.2.0"
-rustls = { version = "0.23.30", default-features = false }
+rustls = { version = "0.23.31", default-features = false }
 rustls-post-quantum = { version = "0.2.3", optional = true }
 tokio-rustls = { version = "0.26.2", features = ["early-data"] }