diff --git a/Cargo.lock b/Cargo.lock
index c85c58bc7061b..494792c2c6100 100644
--- a/Cargo.lock
+++ b/Cargo.lock
@@ -3781,7 +3781,7 @@ dependencies = [
  "assert_cmd",
  "async-trait",
  "axum",
- "base64 0.13.1",
+ "base64 0.21.0",
  "bytes",
  "bytesize",
  "cc",
@@ -3944,7 +3944,7 @@ name = "mz-frontegg-auth"
 version = "0.0.0"
 dependencies = [
  "anyhow",
- "base64 0.13.1",
+ "base64 0.21.0",
  "derivative",
  "jsonwebtoken",
  "mz-ore",
@@ -4245,7 +4245,7 @@ dependencies = [
  "aws-credential-types",
  "aws-sdk-s3",
  "aws-types",
- "base64 0.13.1",
+ "base64 0.21.0",
  "bytes",
  "deadpool-postgres",
  "differential-dataflow",
@@ -8333,7 +8333,7 @@ dependencies = [
  "aws-sigv4",
  "aws-smithy-http",
  "axum",
- "base64 0.13.1",
+ "base64 0.21.0",
  "bstr",
  "byteorder",
  "bytes",
diff --git a/src/environmentd/Cargo.toml b/src/environmentd/Cargo.toml
index c6ba40e87534c..19e3bfdd1d8ad 100644
--- a/src/environmentd/Cargo.toml
+++ b/src/environmentd/Cargo.toml
@@ -13,7 +13,7 @@ anyhow = "1.0.66"
 askama = { version = "0.11.1", default-features = false, features = ["config", "serde-json"] }
 async-trait = "0.1.59"
 axum = { version = "0.6.7", features = ["headers", "ws"] }
-base64 = "0.13.1"
+base64 = "0.21.0"
 bytes = "1.3.0"
 bytesize = "1.1.0"
 chrono = { version = "0.4.23", default-features = false, features = ["std"] }
diff --git a/src/frontegg-auth/Cargo.toml b/src/frontegg-auth/Cargo.toml
index 36f641340a274..d330f2462f90c 100644
--- a/src/frontegg-auth/Cargo.toml
+++ b/src/frontegg-auth/Cargo.toml
@@ -8,7 +8,7 @@ publish = false
 
 [dependencies]
 anyhow = "1.0.66"
-base64 = "0.13.1"
+base64 = "0.21.0"
 derivative = "2.2.0"
 jsonwebtoken = "8.2.0"
 mz-ore = { path = "../ore", features = ["network"] }
diff --git a/src/persist/Cargo.toml b/src/persist/Cargo.toml
index a70af7ed4ec60..9a1d2d6ac4a9d 100644
--- a/src/persist/Cargo.toml
+++ b/src/persist/Cargo.toml
@@ -26,7 +26,7 @@ aws-config = { version = "0.53.0", default-features = false, features = ["native
 aws-credential-types = { version = "0.53.0", features = ["hardcoded-credentials"] }
 aws-sdk-s3 = { version = "0.23.0", default-features = false, features = ["native-tls", "rt-tokio"]  }
 aws-types = "0.53.0"
-base64 = "0.13.1"
+base64 = "0.21.0"
 bytes = "1.3.0"
 deadpool-postgres = "0.10.3"
 differential-dataflow = { git = "https://github.com/TimelyDataflow/differential-dataflow.git" }
diff --git a/src/workspace-hack/Cargo.toml b/src/workspace-hack/Cargo.toml
index fd1d927a1a5b0..c2b965062913b 100644
--- a/src/workspace-hack/Cargo.toml
+++ b/src/workspace-hack/Cargo.toml
@@ -21,7 +21,7 @@ aws-sig-auth = { version = "0.53.0", default-features = false, features = ["sign
 aws-sigv4 = { version = "0.53.0", features = ["sign-eventstream"] }
 aws-smithy-http = { version = "0.53.1", default-features = false, features = ["event-stream", "rt-tokio"] }
 axum = { version = "0.6.7", features = ["headers", "ws"] }
-base64 = { version = "0.13.1", features = ["alloc"] }
+base64 = { version = "0.21.0", features = ["alloc"] }
 bstr = { version = "0.2.14" }
 byteorder = { version = "1.4.3" }
 bytes = { version = "1.3.0" }
@@ -117,7 +117,7 @@ aws-sig-auth = { version = "0.53.0", default-features = false, features = ["sign
 aws-sigv4 = { version = "0.53.0", features = ["sign-eventstream"] }
 aws-smithy-http = { version = "0.53.1", default-features = false, features = ["event-stream", "rt-tokio"] }
 axum = { version = "0.6.7", features = ["headers", "ws"] }
-base64 = { version = "0.13.1", features = ["alloc"] }
+base64 = { version = "0.21.0", features = ["alloc"] }
 bstr = { version = "0.2.14" }
 byteorder = { version = "1.4.3" }
 bytes = { version = "1.3.0" }