diff --git a/rust/Cargo.lock b/rust/Cargo.lock
index 4fd612999..e4406818a 100644
--- a/rust/Cargo.lock
+++ b/rust/Cargo.lock
@@ -5373,12 +5373,13 @@ dependencies = [
 
 [[package]]
 name = "serde_json"
-version = "1.0.117"
+version = "1.0.125"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "455182ea6142b14f93f4bc5320a2b31c1f266b66a4a5c858b013302a5d8cbfc3"
+checksum = "83c8e735a073ccf5be70aa8066aa984eaf2fa000db6c8d0100ae605b366d31ed"
 dependencies = [
  "indexmap 2.2.6",
  "itoa 1.0.11",
+ "memchr",
  "ryu",
  "serde",
 ]
diff --git a/rust/headless-client/Cargo.toml b/rust/headless-client/Cargo.toml
index 9a0431bea..e4f35a47c 100644
--- a/rust/headless-client/Cargo.toml
+++ b/rust/headless-client/Cargo.toml
@@ -22,7 +22,7 @@ phoenix-channel = { workspace = true }
 rustls = { workspace = true }
 secrecy = { workspace = true }
 serde = { version = "1.0.204", features = ["derive"] }
-serde_json = "1.0.117"
+serde_json = "1.0.125"
 thiserror = { version = "1.0", default-features = false }
 # This actually relies on many other features in Tokio, so this will probably
 # fail to build outside the workspace. <https://github.com/firezone/firezone/pull/4328#discussion_r1540342142>
diff --git a/rust/phoenix-channel/Cargo.toml b/rust/phoenix-channel/Cargo.toml
index 4787f7def..acb02ed3f 100644
--- a/rust/phoenix-channel/Cargo.toml
+++ b/rust/phoenix-channel/Cargo.toml
@@ -13,7 +13,7 @@ libc = "0.2"
 rand_core = "0.6.4"
 secrecy = { workspace = true }
 serde = { version = "1.0.204", features = ["derive"] }
-serde_json = "1.0.117"
+serde_json = "1.0.125"
 sha2 = "0.10.8"
 socket-factory = { workspace = true }
 thiserror = "1.0.61"