diff --git a/rust/Cargo.lock b/rust/Cargo.lock
index 386010859..3de341941 100644
--- a/rust/Cargo.lock
+++ b/rust/Cargo.lock
@@ -1031,9 +1031,9 @@ dependencies = [
 
 [[package]]
 name = "clap"
-version = "4.5.4"
+version = "4.5.13"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "90bc066a67923782aa8515dbaea16946c5bcc5addbd668bb80af688e53e548a0"
+checksum = "0fbb260a053428790f3de475e304ff84cdbc4face759ea7a3e64c1edd938a7fc"
 dependencies = [
  "clap_builder",
  "clap_derive",
@@ -1041,9 +1041,9 @@ dependencies = [
 
 [[package]]
 name = "clap_builder"
-version = "4.5.2"
+version = "4.5.13"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "ae129e2e766ae0ec03484e609954119f123cc1fe650337e155d03b022f24f7b4"
+checksum = "64b17d7ea74e9f833c7dbf2cbe4fb12ff26783eda4782a8975b72f895c9b4d99"
 dependencies = [
  "anstream",
  "anstyle",
@@ -1054,9 +1054,9 @@ dependencies = [
 
 [[package]]
 name = "clap_derive"
-version = "4.5.4"
+version = "4.5.13"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "528131438037fd55894f62d6e9f068b8f45ac57ffa77517819645d10aed04f64"
+checksum = "501d359d5f3dcaf6ecdeee48833ae73ec6e42723a1e52419c79abf9507eec0a0"
 dependencies = [
  "heck 0.5.0",
  "proc-macro2",
diff --git a/rust/bin-shared/Cargo.toml b/rust/bin-shared/Cargo.toml
index 3f2230d15..97bca01b7 100644
--- a/rust/bin-shared/Cargo.toml
+++ b/rust/bin-shared/Cargo.toml
@@ -8,7 +8,7 @@ description = "Firezone-specific modules shared between binaries."
 [dependencies]
 anyhow = "1.0.82"
 axum = { version = "0.7.5", default-features = false, features = ["http1", "tokio"] }
-clap = { version = "4.5.4", features = ["derive", "env"] }
+clap = { version = "4.5.13", features = ["derive", "env"] }
 futures = "0.3"
 git-version = "0.3.9"
 ip_network = { version = "0.4", default-features = false, features = ["serde"] }
diff --git a/rust/gateway/Cargo.toml b/rust/gateway/Cargo.toml
index 44312d7e5..579385102 100644
--- a/rust/gateway/Cargo.toml
+++ b/rust/gateway/Cargo.toml
@@ -11,7 +11,7 @@ async-trait = { version = "0.1", default-features = false }
 backoff = { workspace = true }
 boringtun = { workspace = true }
 chrono = { workspace = true }
-clap = "4.5.4"
+clap = "4.5.13"
 connlib-shared = { workspace = true }
 dns-lookup = { workspace = true }
 domain = { workspace = true }
diff --git a/rust/relay/Cargo.toml b/rust/relay/Cargo.toml
index 37fb8dd97..fecccdc02 100644
--- a/rust/relay/Cargo.toml
+++ b/rust/relay/Cargo.toml
@@ -9,7 +9,7 @@ backoff = "0.4"
 base64 = "0.22.1"
 bytecodec = "0.4.15"
 bytes = "1.7.1"
-clap = { version = "4.5.4", features = ["derive", "env"] }
+clap = { version = "4.5.13", features = ["derive", "env"] }
 derive_more = { version = "0.99.18", features = ["from"] }
 firezone-bin-shared = { workspace = true }
 futures = "0.3.29"