diff --git a/Cargo.lock b/Cargo.lock
index d10b16c7030a1..bb8e3352098a9 100644
--- a/Cargo.lock
+++ b/Cargo.lock
@@ -115,7 +115,7 @@ source = "git+https://github.com/jorgecarleitao/arrow2.git#0ba4f8e21547ed08b4468
 dependencies = [
  "ahash",
  "arrow-format",
- "base64",
+ "base64 0.13.1",
  "bytemuck",
  "chrono",
  "dyn-clone",
@@ -701,12 +701,49 @@ dependencies = [
 
 [[package]]
 name = "axum"
-version = "0.6.1"
-source = "git+https://github.com/tokio-rs/axum.git#978ae6335862b264b4368e01a52177d98c42b2d9"
+version = "0.6.6"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "4e246206a63c9830e118d12c894f56a82033da1a2361f5544deeee3df85c99d9"
+dependencies = [
+ "async-trait",
+ "axum-core 0.3.2 (registry+https://github.com/rust-lang/crates.io-index)",
+ "base64 0.21.0",
+ "bitflags",
+ "bytes",
+ "futures-util",
+ "headers",
+ "http",
+ "http-body",
+ "hyper",
+ "itoa",
+ "matchit",
+ "memchr",
+ "mime",
+ "percent-encoding",
+ "pin-project-lite",
+ "rustversion",
+ "serde",
+ "serde_json",
+ "serde_path_to_error",
+ "serde_urlencoded",
+ "sha1",
+ "sync_wrapper",
+ "tokio",
+ "tokio-tungstenite",
+ "tower",
+ "tower-http",
+ "tower-layer",
+ "tower-service",
+]
+
+[[package]]
+name = "axum"
+version = "0.6.6"
+source = "git+https://github.com/tokio-rs/axum.git#c18ff9dd63b2eb958806d280ef66ff0a4ce0cea9"
 dependencies = [
  "async-trait",
- "axum-core",
- "base64",
+ "axum-core 0.3.2 (git+https://github.com/tokio-rs/axum.git)",
+ "base64 0.21.0",
  "bitflags",
  "bytes",
  "futures-util",
@@ -737,8 +774,25 @@ dependencies = [
 
 [[package]]
 name = "axum-core"
-version = "0.3.0"
-source = "git+https://github.com/tokio-rs/axum.git#978ae6335862b264b4368e01a52177d98c42b2d9"
+version = "0.3.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "1cae3e661676ffbacb30f1a824089a8c9150e71017f7e1e38f2aa32009188d34"
+dependencies = [
+ "async-trait",
+ "bytes",
+ "futures-util",
+ "http",
+ "http-body",
+ "mime",
+ "rustversion",
+ "tower-layer",
+ "tower-service",
+]
+
+[[package]]
+name = "axum-core"
+version = "0.3.2"
+source = "git+https://github.com/tokio-rs/axum.git#c18ff9dd63b2eb958806d280ef66ff0a4ce0cea9"
 dependencies = [
  "async-trait",
  "bytes",
@@ -789,6 +843,12 @@ version = "0.13.1"
 source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "9e1b586273c5702936fe7b7d6896644d8be71e6314cfe09d3167c95f712589e8"
 
+[[package]]
+name = "base64"
+version = "0.21.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "a4a4ddaa51a5bc52a6948f74c06d20aaaddb71924eab79b8c97a8c556e942d6a"
+
 [[package]]
 name = "base64-simd"
 version = "0.7.0"
@@ -2397,7 +2457,7 @@ version = "7.4.0"
 source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "6490be71f07a5f62b564bc58e36953f675833df11c7e4a0647bee7a07ca1ec5e"
 dependencies = [
- "base64",
+ "base64 0.13.1",
  "byteorder",
  "flate2",
  "nom",
@@ -2410,7 +2470,7 @@ version = "0.3.8"
 source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "f3e372db8e5c0d213e0cd0b9be18be2aca3d44cf2fe30a9d46a65581cd454584"
 dependencies = [
- "base64",
+ "base64 0.13.1",
  "bitflags",
  "bytes",
  "headers-core",
@@ -2744,7 +2804,7 @@ version = "8.2.0"
 source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "09f4f04699947111ec1733e71778d763555737579e44b85844cae8e1940a1828"
 dependencies = [
- "base64",
+ "base64 0.13.1",
  "pem",
  "ring",
  "serde",
@@ -2771,7 +2831,7 @@ version = "0.16.0"
 source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "6d9455388f4977de4d0934efa9f7d36296295537d774574113a20f6082de03da"
 dependencies = [
- "base64",
+ "base64 0.13.1",
  "bytes",
  "chrono",
  "http",
@@ -2801,7 +2861,7 @@ version = "0.77.0"
 source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "e80db3ca107e89da5f7eae37ea5274e06cefdcf9689d0ebd5ec3575a6f983e4e"
 dependencies = [
- "base64",
+ "base64 0.13.1",
  "bytes",
  "chrono",
  "dirs-next",
@@ -3282,7 +3342,7 @@ version = "0.29.2"
 source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "9006c95034ccf7b903d955f210469119f6c3477fc9c9e7a7845ce38a3e665c2a"
 dependencies = [
- "base64",
+ "base64 0.13.1",
  "bigdecimal",
  "bindgen",
  "bitflags",
@@ -3318,7 +3378,7 @@ name = "mz"
 version = "0.1.0"
 dependencies = [
  "anyhow",
- "axum",
+ "axum 0.6.6 (registry+https://github.com/rust-lang/crates.io-index)",
  "clap",
  "dirs",
  "indicatif",
@@ -3601,7 +3661,7 @@ name = "mz-clusterd"
 version = "0.44.0-dev"
 dependencies = [
  "anyhow",
- "axum",
+ "axum 0.6.6 (registry+https://github.com/rust-lang/crates.io-index)",
  "clap",
  "fail",
  "futures",
@@ -3752,8 +3812,8 @@ dependencies = [
  "askama",
  "assert_cmd",
  "async-trait",
- "axum",
- "base64",
+ "axum 0.6.6 (registry+https://github.com/rust-lang/crates.io-index)",
+ "base64 0.13.1",
  "bytes",
  "bytesize",
  "cc",
@@ -3915,7 +3975,7 @@ name = "mz-frontegg-auth"
 version = "0.0.0"
 dependencies = [
  "anyhow",
- "base64",
+ "base64 0.13.1",
  "derivative",
  "jsonwebtoken",
  "mz-ore",
@@ -3934,7 +3994,7 @@ version = "0.0.0"
 dependencies = [
  "anyhow",
  "askama",
- "axum",
+ "axum 0.6.6 (registry+https://github.com/rust-lang/crates.io-index)",
  "headers",
  "include_dir",
  "mz-ore",
@@ -4240,7 +4300,7 @@ dependencies = [
  "aws-credential-types",
  "aws-sdk-s3",
  "aws-types",
- "base64",
+ "base64 0.13.1",
  "bytes",
  "deadpool-postgres",
  "differential-dataflow",
@@ -4279,7 +4339,7 @@ dependencies = [
  "anyhow",
  "async-stream",
  "async-trait",
- "axum",
+ "axum 0.6.6 (registry+https://github.com/rust-lang/crates.io-index)",
  "bytes",
  "clap",
  "criterion",
@@ -4441,7 +4501,7 @@ version = "0.0.0"
 dependencies = [
  "anyhow",
  "askama",
- "axum",
+ "axum 0.6.6 (registry+https://github.com/rust-lang/crates.io-index)",
  "backtrace",
  "bytesize",
  "cfg-if",
@@ -5308,9 +5368,9 @@ dependencies = [
 
 [[package]]
 name = "openssl"
-version = "0.10.43"
+version = "0.10.45"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "020433887e44c27ff16365eaa2d380547a94544ad509aff6eb5b6e3e0b27b376"
+checksum = "b102428fd03bc5edf97f62620f7298614c45cedf287c271e7ed450bbaf83f2e1"
 dependencies = [
  "bitflags",
  "cfg-if",
@@ -5564,7 +5624,7 @@ version = "1.0.2"
 source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "e9a3b09a20e374558580a4914d3b7d89bd61b954a5a5e1dcbea98753addb1947"
 dependencies = [
- "base64",
+ "base64 0.13.1",
 ]
 
 [[package]]
@@ -5747,7 +5807,7 @@ name = "postgres-protocol"
 version = "0.6.4"
 source = "git+https://github.com/MaterializeInc/rust-postgres#9c9086235344fe794361a9985d97a64b42e61929"
 dependencies = [
- "base64",
+ "base64 0.13.1",
  "byteorder",
  "bytes",
  "fallible-iterator",
@@ -6032,7 +6092,7 @@ version = "0.9.2"
 source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "d378290cd658b119ce87621931ef448017ef1a0044d7b681159d779e7e07b8f6"
 dependencies = [
- "base64",
+ "base64 0.13.1",
  "prost",
  "prost-types",
  "serde",
@@ -6278,7 +6338,7 @@ version = "0.11.13"
 source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "68cc60575865c7831548863cc02356512e3f1dc2f3f82cb837d7fc4cc8f3c97c"
 dependencies = [
- "base64",
+ "base64 0.13.1",
  "bytes",
  "encoding_rs",
  "futures-core",
@@ -6753,7 +6813,7 @@ version = "2.1.0"
 source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "25bf4a5a814902cd1014dbccfa4d4560fb8432c779471e96e035602519f82eef"
 dependencies = [
- "base64",
+ "base64 0.13.1",
  "chrono",
  "hex",
  "indexmap",
@@ -7541,8 +7601,8 @@ checksum = "8f219fad3b929bef19b1f86fbc0358d35daed8f2cac972037ac0dc10bbb8d5fb"
 dependencies = [
  "async-stream",
  "async-trait",
- "axum",
- "base64",
+ "axum 0.6.6 (registry+https://github.com/rust-lang/crates.io-index)",
+ "base64 0.13.1",
  "bytes",
  "futures-core",
  "futures-util",
@@ -7604,7 +7664,7 @@ version = "0.3.5"
 source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "f873044bf02dd1e8239e9c1293ea39dad76dc594ec16185d0a1bf31d8dc8d858"
 dependencies = [
- "base64",
+ "base64 0.13.1",
  "bitflags",
  "bytes",
  "futures-core",
@@ -7763,7 +7823,7 @@ version = "0.18.0"
 source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "30ee6ab729cd4cf0fd55218530c4522ed30b7b6081752839b68fcec8d0960788"
 dependencies = [
- "base64",
+ "base64 0.13.1",
  "byteorder",
  "bytes",
  "http",
@@ -7875,7 +7935,7 @@ version = "2.5.0"
 source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "b97acb4c28a254fd7a4aeec976c46a7fa404eac4d7c134b30c75144846d7cb8f"
 dependencies = [
- "base64",
+ "base64 0.13.1",
  "chunked_transfer",
  "log",
  "native-tls",
@@ -8189,8 +8249,8 @@ dependencies = [
  "aws-sig-auth",
  "aws-sigv4",
  "aws-smithy-http",
- "axum",
- "base64",
+ "axum 0.6.6 (git+https://github.com/tokio-rs/axum.git)",
+ "base64 0.13.1",
  "bstr",
  "byteorder",
  "bytes",
@@ -8349,3 +8409,8 @@ dependencies = [
  "cc",
  "libc",
 ]
+
+[[patch.unused]]
+name = "axum"
+version = "0.6.1"
+source = "git+https://github.com/tokio-rs/axum.git#978ae6335862b264b4368e01a52177d98c42b2d9"
diff --git a/src/ccsr/Cargo.toml b/src/ccsr/Cargo.toml
index 22fe6a58fa40e..7074df3a49b1e 100644
--- a/src/ccsr/Cargo.toml
+++ b/src/ccsr/Cargo.toml
@@ -9,7 +9,7 @@ publish = false
 [dependencies]
 anyhow = "1.0.66"
 native-tls = "0.2.11"
-openssl = { version = "0.10.43", features = ["vendored"] }
+openssl = { version = "0.10.45", features = ["vendored"] }
 reqwest = { version = "0.11.13", features = ["blocking", "json", "native-tls-vendored"] }
 serde = { version = "1.0.152", features = ["derive"] }
 serde_json = "1.0.89"
diff --git a/src/environmentd/Cargo.toml b/src/environmentd/Cargo.toml
index 9cf59fd58ebaf..5524d95d1f7c4 100644
--- a/src/environmentd/Cargo.toml
+++ b/src/environmentd/Cargo.toml
@@ -58,7 +58,7 @@ mz-stash = { path = "../stash" }
 mz-storage-client = { path = "../storage-client" }
 nix = "0.26.1"
 num_cpus = "1.14.0"
-openssl = { version = "0.10.43", features = ["vendored"] }
+openssl = { version = "0.10.45", features = ["vendored"] }
 openssl-sys = { version = "0.9.80", features = ["vendored"] }
 opentelemetry = { git = "https://github.com/MaterializeInc/opentelemetry-rust.git", features = ["rt-tokio", "trace"] }
 prometheus = { version = "0.13.3", default-features = false }
diff --git a/src/ore/Cargo.toml b/src/ore/Cargo.toml
index 1f3055ed97eef..7268757daa2f5 100644
--- a/src/ore/Cargo.toml
+++ b/src/ore/Cargo.toml
@@ -24,7 +24,7 @@ either = "1.8.0"
 futures = { version = "0.3.25", optional = true }
 once_cell = "1.16.0"
 # The vendored feature is transitively depended upon by tokio-openssl.
-openssl = { version = "0.10.43", features = ["vendored"], optional = true }
+openssl = { version = "0.10.45", features = ["vendored"], optional = true }
 paste = "1.0.11"
 pin-project = "1.0.12"
 prometheus = { version = "0.13.3", default-features = false, optional = true }
diff --git a/src/persist/Cargo.toml b/src/persist/Cargo.toml
index 6295faee29f99..54cf9b4b49fb3 100644
--- a/src/persist/Cargo.toml
+++ b/src/persist/Cargo.toml
@@ -38,7 +38,7 @@ mz-aws-s3-util = { path = "../aws-s3-util" }
 mz-ore = { path = "../ore", default-features = false, features = ["metrics", "async"] }
 mz-persist-types = { path = "../persist-types" }
 mz-proto = { path = "../proto" }
-openssl = { version = "0.10.43", features = ["vendored"] }
+openssl = { version = "0.10.45", features = ["vendored"] }
 openssl-sys = { version = "0.9.80", features = ["vendored"] }
 postgres-openssl = { git = "https://github.com/MaterializeInc/rust-postgres" }
 prometheus = { version = "0.13.3", default-features = false }
diff --git a/src/pgwire/Cargo.toml b/src/pgwire/Cargo.toml
index 287f8e25bbcee..578b4aed3d6b4 100644
--- a/src/pgwire/Cargo.toml
+++ b/src/pgwire/Cargo.toml
@@ -22,7 +22,7 @@ mz-pgcopy = { path = "../pgcopy" }
 mz-pgrepr = { path = "../pgrepr" }
 mz-repr = { path = "../repr" }
 mz-sql = { path = "../sql" }
-openssl = { version = "0.10.43", features = ["vendored"] }
+openssl = { version = "0.10.45", features = ["vendored"] }
 postgres = { git = "https://github.com/MaterializeInc/rust-postgres" }
 tokio = "1.24.2"
 tokio-openssl = "0.6.3"
diff --git a/src/postgres-util/Cargo.toml b/src/postgres-util/Cargo.toml
index b9e8f7ef00fa6..6343e72c46780 100644
--- a/src/postgres-util/Cargo.toml
+++ b/src/postgres-util/Cargo.toml
@@ -13,7 +13,7 @@ mz-ore = { path = "../ore", features = ["async"] }
 mz-proto = { path = "../proto" }
 mz-repr = { path = "../repr" }
 mz-ssh-util = { path = "../ssh-util" }
-openssl = { version = "0.10.43", features = ["vendored"] }
+openssl = { version = "0.10.45", features = ["vendored"] }
 openssh = "0.9.8"
 postgres-openssl = { git = "https://github.com/MaterializeInc/rust-postgres" }
 proptest = { git = "https://github.com/MaterializeInc/proptest.git", default-features = false, features = ["std"]}
diff --git a/src/ssh-util/Cargo.toml b/src/ssh-util/Cargo.toml
index b6e6d07131c84..703d5f031d59e 100644
--- a/src/ssh-util/Cargo.toml
+++ b/src/ssh-util/Cargo.toml
@@ -9,7 +9,7 @@ publish = false
 [dependencies]
 anyhow = { version = "1.0.66" }
 openssh = "0.9.8"
-openssl = { version = "0.10.43", features = ["vendored"] }
+openssl = { version = "0.10.45", features = ["vendored"] }
 rand = "0.8.5"
 serde = { version = "1.0.152", features = ["derive"] }
 serde_json = { version = "1.0.89" }
diff --git a/src/workspace-hack/Cargo.toml b/src/workspace-hack/Cargo.toml
index f991554b676d0..db3f302b0d6ee 100644
--- a/src/workspace-hack/Cargo.toml
+++ b/src/workspace-hack/Cargo.toml
@@ -64,7 +64,7 @@ nom = { version = "7.1.2" }
 num-bigint = { version = "0.4.3" }
 num-integer = { version = "0.1.44", features = ["i128"] }
 num-traits = { version = "0.2.15", features = ["i128"] }
-openssl = { version = "0.10.43", features = ["vendored"] }
+openssl = { version = "0.10.45", features = ["vendored"] }
 openssl-sys = { version = "0.9.80", default-features = false, features = ["vendored"] }
 ordered-float = { version = "3.4.0", features = ["serde"] }
 parking_lot = { version = "0.12.1", features = ["send_guard"] }
@@ -162,7 +162,7 @@ nom = { version = "7.1.2" }
 num-bigint = { version = "0.4.3" }
 num-integer = { version = "0.1.44", features = ["i128"] }
 num-traits = { version = "0.2.15", features = ["i128"] }
-openssl = { version = "0.10.43", features = ["vendored"] }
+openssl = { version = "0.10.45", features = ["vendored"] }
 openssl-sys = { version = "0.9.80", default-features = false, features = ["vendored"] }
 ordered-float = { version = "3.4.0", features = ["serde"] }
 parking_lot = { version = "0.12.1", features = ["send_guard"] }