diff --git a/Cargo.lock b/Cargo.lock
index 2b312fa..9221df2 100644
--- a/Cargo.lock
+++ b/Cargo.lock
@@ -515,9 +515,9 @@ dependencies = [
 
 [[package]]
 name = "subtle"
-version = "2.5.0"
+version = "2.6.1"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "81cdd64d312baedb58e21336b31bc043b77e01cc99033ce76ef539f78e965ebc"
+checksum = "13c2bddecc57b384dee18652358fb23172facb8a2c51ccc10d74c157bdea3292"
 
 [[package]]
 name = "syn"
diff --git a/jose-b64/Cargo.toml b/jose-b64/Cargo.toml
index 08e6fda..0cb4729 100644
--- a/jose-b64/Cargo.toml
+++ b/jose-b64/Cargo.toml
@@ -25,7 +25,7 @@ base64ct = { version = "1.6.0", default-features = false, features = ["alloc"] }
 zeroize = { version = "1.7.0", default-features = false, optional = true, features = ["alloc", "serde"] }
 serde = { version = "1.0.185", default-features = false, optional = true, features = ["alloc", "derive"] }
 serde_json = { version = "1.0.96", default-features = false, optional = true, features = ["alloc"] }
-subtle = { version = "2.5.0", default-features = false, optional = true }
+subtle = { version = "2.6.1", default-features = false, optional = true }
 
 [package.metadata.docs.rs]
 all-features = true