diff --git a/Cargo.lock b/Cargo.lock
index ab6d9d868ca4..dffc15ff49b8 100644
--- a/Cargo.lock
+++ b/Cargo.lock
@@ -4930,7 +4930,7 @@ dependencies = [
  "aws-smithy-types",
  "axum",
  "axum-server",
- "base64 0.22.1",
+ "base64 0.23.0",
  "blake3",
  "byteorder",
  "bytes",
@@ -5065,7 +5065,7 @@ dependencies = [
  "async-trait",
  "axum",
  "axum-server",
- "base64 0.22.1",
+ "base64 0.23.0",
  "bat",
  "bzip2",
  "chrono",
@@ -5131,7 +5131,7 @@ dependencies = [
  "anyhow",
  "async-stream",
  "async-trait",
- "base64 0.22.1",
+ "base64 0.23.0",
  "chrono",
  "encoding_rs",
  "env-lock",
@@ -5165,7 +5165,7 @@ name = "goose-mcp"
 version = "1.45.0"
 dependencies = [
  "anyhow",
- "base64 0.22.1",
+ "base64 0.23.0",
  "chrono",
  "docx-rs",
  "etcetera 0.11.0",
@@ -5197,7 +5197,7 @@ dependencies = [
  "anyhow",
  "async-stream",
  "async-trait",
- "base64 0.22.1",
+ "base64 0.23.0",
  "chrono",
  "env-lock",
  "futures",
@@ -5258,7 +5258,7 @@ dependencies = [
  "agent-client-protocol",
  "agent-client-protocol-schema",
  "anyhow",
- "base64 0.22.1",
+ "base64 0.23.0",
  "futures",
  "goose-providers",
  "goose-sdk-types",
diff --git a/Cargo.toml b/Cargo.toml
index 9c8a2c6ad3bb..ae24fea3abfa 100644
--- a/Cargo.toml
+++ b/Cargo.toml
@@ -29,7 +29,7 @@ anyhow = { version = "1.0.102", default-features = false, features = ["std"] }
 async-stream = { version = "0.3.6", default-features = false }
 async-trait = { version = "0.1.89", default-features = false }
 axum = { version = "0.8", default-features = false, features = ["http1", "http2", "json", "tokio", "query"] }
-base64 = { version = "0.22.1", default-features = false, features = ["std"] }
+base64 = { version = "0.23.0", default-features = false, features = ["std"] }
 bytes = { version = "1.10.1", default-features = false, features = ["std"] }
 candle-core = { version = "0.11", default-features = false }
 candle-nn = { version = "0.11", default-features = false }