diff --git a/Cargo.lock b/Cargo.lock
index c85c58bc7061b..f9ae8dc4f82bf 100644
--- a/Cargo.lock
+++ b/Cargo.lock
@@ -5348,9 +5348,9 @@ dependencies = [
 
 [[package]]
 name = "openssl"
-version = "0.10.48"
+version = "0.10.50"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "518915b97df115dd36109bfa429a48b8f737bd05508cf9588977b599648926d2"
+checksum = "7e30d8bc91859781f0a943411186324d580f2bbeb71b452fe91ae344806af3f1"
 dependencies = [
  "bitflags",
  "cfg-if",
@@ -5389,11 +5389,10 @@ dependencies = [
 
 [[package]]
 name = "openssl-sys"
-version = "0.9.83"
+version = "0.9.85"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "666416d899cf077260dac8698d60a60b435a46d57e82acb1be3d0dad87284e5b"
+checksum = "0d3d193fb1488ad46ffe3aaabc912cc931d02ee8518fe2959aea8ef52718b0c0"
 dependencies = [
- "autocfg",
  "cc",
  "libc",
  "openssl-src",
diff --git a/src/ccsr/Cargo.toml b/src/ccsr/Cargo.toml
index 7e0e5cca24623..6c6ed0cddcf4c 100644
--- a/src/ccsr/Cargo.toml
+++ b/src/ccsr/Cargo.toml
@@ -9,7 +9,7 @@ publish = false
 [dependencies]
 anyhow = "1.0.66"
 native-tls = "0.2.11"
-openssl = { version = "0.10.48", features = ["vendored"] }
+openssl = { version = "0.10.50", features = ["vendored"] }
 reqwest = { version = "0.11.13", features = ["blocking", "json", "native-tls-vendored"] }
 serde = { version = "1.0.152", features = ["derive"] }
 serde_json = "1.0.89"
diff --git a/src/environmentd/Cargo.toml b/src/environmentd/Cargo.toml
index c6ba40e87534c..8a9356608fe0f 100644
--- a/src/environmentd/Cargo.toml
+++ b/src/environmentd/Cargo.toml
@@ -58,7 +58,7 @@ mz-stash = { path = "../stash" }
 mz-storage-client = { path = "../storage-client" }
 nix = "0.26.1"
 num_cpus = "1.14.0"
-openssl = { version = "0.10.48", features = ["vendored"] }
+openssl = { version = "0.10.50", features = ["vendored"] }
 openssl-sys = { version = "0.9.80", features = ["vendored"] }
 opentelemetry = { git = "https://github.com/MaterializeInc/opentelemetry-rust.git", features = ["rt-tokio", "trace"] }
 prometheus = { version = "0.13.3", default-features = false }
diff --git a/src/ore/Cargo.toml b/src/ore/Cargo.toml
index 33df173d278e5..b90c7c6079a02 100644
--- a/src/ore/Cargo.toml
+++ b/src/ore/Cargo.toml
@@ -24,7 +24,7 @@ either = "1.8.0"
 futures = { version = "0.3.25", optional = true }
 once_cell = "1.16.0"
 # The vendored feature is transitively depended upon by tokio-openssl.
-openssl = { version = "0.10.48", features = ["vendored"], optional = true }
+openssl = { version = "0.10.50", features = ["vendored"], optional = true }
 paste = "1.0.11"
 pin-project = "1.0.12"
 prometheus = { version = "0.13.3", default-features = false, optional = true }
diff --git a/src/persist/Cargo.toml b/src/persist/Cargo.toml
index a70af7ed4ec60..1a09da647dc19 100644
--- a/src/persist/Cargo.toml
+++ b/src/persist/Cargo.toml
@@ -38,7 +38,7 @@ mz-aws-s3-util = { path = "../aws-s3-util" }
 mz-ore = { path = "../ore", default-features = false, features = ["metrics", "async"] }
 mz-persist-types = { path = "../persist-types" }
 mz-proto = { path = "../proto" }
-openssl = { version = "0.10.48", features = ["vendored"] }
+openssl = { version = "0.10.50", features = ["vendored"] }
 openssl-sys = { version = "0.9.80", features = ["vendored"] }
 postgres-openssl = { git = "https://github.com/MaterializeInc/rust-postgres" }
 prometheus = { version = "0.13.3", default-features = false }
diff --git a/src/pgwire/Cargo.toml b/src/pgwire/Cargo.toml
index 30d1a7dd63da0..fe294c4d86e50 100644
--- a/src/pgwire/Cargo.toml
+++ b/src/pgwire/Cargo.toml
@@ -22,7 +22,7 @@ mz-pgcopy = { path = "../pgcopy" }
 mz-pgrepr = { path = "../pgrepr" }
 mz-repr = { path = "../repr" }
 mz-sql = { path = "../sql" }
-openssl = { version = "0.10.48", features = ["vendored"] }
+openssl = { version = "0.10.50", features = ["vendored"] }
 postgres = { git = "https://github.com/MaterializeInc/rust-postgres" }
 tokio = "1.24.2"
 tokio-openssl = "0.6.3"
diff --git a/src/postgres-util/Cargo.toml b/src/postgres-util/Cargo.toml
index a0f6155a85f6f..4e9b1bd882bb1 100644
--- a/src/postgres-util/Cargo.toml
+++ b/src/postgres-util/Cargo.toml
@@ -13,7 +13,7 @@ mz-ore = { path = "../ore", features = ["async"] }
 mz-proto = { path = "../proto" }
 mz-repr = { path = "../repr" }
 mz-ssh-util = { path = "../ssh-util" }
-openssl = { version = "0.10.48", features = ["vendored"] }
+openssl = { version = "0.10.50", features = ["vendored"] }
 openssh = { version = "0.9.8", default-features = false, features = ["native-mux"] }
 postgres-openssl = { git = "https://github.com/MaterializeInc/rust-postgres" }
 proptest = { git = "https://github.com/MaterializeInc/proptest.git", default-features = false, features = ["std"]}
diff --git a/src/ssh-util/Cargo.toml b/src/ssh-util/Cargo.toml
index a5336c2e4e892..dbdbea55c1f3e 100644
--- a/src/ssh-util/Cargo.toml
+++ b/src/ssh-util/Cargo.toml
@@ -10,7 +10,7 @@ publish = false
 anyhow = { version = "1.0.66" }
 mz-ore = { path = "../ore" }
 openssh = { version = "0.9.8", default-features = false, features = ["native-mux"] }
-openssl = { version = "0.10.48", features = ["vendored"] }
+openssl = { version = "0.10.50", features = ["vendored"] }
 rand = "0.8.5"
 scopeguard = "1.1.0"
 serde = { version = "1.0.152", features = ["derive"] }
diff --git a/src/workspace-hack/Cargo.toml b/src/workspace-hack/Cargo.toml
index fd1d927a1a5b0..a1308da65adf3 100644
--- a/src/workspace-hack/Cargo.toml
+++ b/src/workspace-hack/Cargo.toml
@@ -64,7 +64,7 @@ nom = { version = "7.1.2" }
 num-bigint = { version = "0.4.3" }
 num-integer = { version = "0.1.44", features = ["i128"] }
 num-traits = { version = "0.2.15", features = ["i128"] }
-openssl = { version = "0.10.48", features = ["vendored"] }
+openssl = { version = "0.10.50", features = ["vendored"] }
 openssl-sys = { version = "0.9.83", default-features = false, features = ["vendored"] }
 ordered-float = { version = "3.4.0", features = ["serde"] }
 parking_lot = { version = "0.12.1", features = ["send_guard"] }
@@ -161,7 +161,7 @@ nom = { version = "7.1.2" }
 num-bigint = { version = "0.4.3" }
 num-integer = { version = "0.1.44", features = ["i128"] }
 num-traits = { version = "0.2.15", features = ["i128"] }
-openssl = { version = "0.10.48", features = ["vendored"] }
+openssl = { version = "0.10.50", features = ["vendored"] }
 openssl-sys = { version = "0.9.83", default-features = false, features = ["vendored"] }
 ordered-float = { version = "3.4.0", features = ["serde"] }
 parking_lot = { version = "0.12.1", features = ["send_guard"] }