diff --git a/Cargo.lock b/Cargo.lock
index bdd54de76..03ff00101 100644
--- a/Cargo.lock
+++ b/Cargo.lock
@@ -4400,9 +4400,9 @@ dependencies = [
 
 [[package]]
 name = "urlencoding"
-version = "2.1.0"
+version = "2.1.2"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "68b90931029ab9b034b300b797048cf23723400aa757e8a2bfb9d748102f9821"
+checksum = "e8db7427f936968176eaa7cdf81b7f98b980b18495ec28f1b5791ac3bfe3eea9"
 
 [[package]]
 name = "users"
diff --git a/kanidm_proto/Cargo.toml b/kanidm_proto/Cargo.toml
index 23dcd4ba0..b392201f1 100644
--- a/kanidm_proto/Cargo.toml
+++ b/kanidm_proto/Cargo.toml
@@ -22,7 +22,7 @@ serde_json = "^1.0.83"
 # Can not upgrade due to breaking timezone apis.
 time = { version = "=0.2.27", features = ["serde", "std"] }
 url = { version = "^2.2.2", features = ["serde"] }
-urlencoding = "2.1.0"
+urlencoding = "2.1.2"
 uuid = { version = "^1.1.2", features = ["serde"] }
 webauthn-rs-proto = "0.4.2-beta.3"
 
diff --git a/kanidmd/idm/Cargo.toml b/kanidmd/idm/Cargo.toml
index def60c89c..ff7b7fc38 100644
--- a/kanidmd/idm/Cargo.toml
+++ b/kanidmd/idm/Cargo.toml
@@ -59,7 +59,7 @@ sketching = { path = "../../sketching" }
 tracing = { version = "^0.1.35", features = ["attributes"] }
 
 url = { version = "^2.2.2", features = ["serde"] }
-urlencoding = "2.1.0"
+urlencoding = "2.1.2"
 uuid = { version = "^1.1.2", features = ["serde", "v4" ] }
 validator = { version = "^0.16.0", features = ["phone"] }
 webauthn-rs = { version = "0.4.5", features = ["resident-key-support", "preview-features", "danger-credential-internals"] }