diff --git a/Cargo.lock b/Cargo.lock
index 29302edac..8b8366be1 100644
--- a/Cargo.lock
+++ b/Cargo.lock
@@ -4672,9 +4672,9 @@ dependencies = [
 
 [[package]]
 name = "serde_json"
-version = "1.0.89"
+version = "1.0.91"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "020ff22c755c2ed3f8cf162dbb41a7268d934702f3ed3631656ea597e08fc3db"
+checksum = "877c235533714907a8c2464236f5c4b2a17262ef1bd71f38f35ea592c8da6883"
 dependencies = [
  "itoa 1.0.4",
  "ryu",
diff --git a/crates/axum-utils/Cargo.toml b/crates/axum-utils/Cargo.toml
index 831efd324..fcc98c484 100644
--- a/crates/axum-utils/Cargo.toml
+++ b/crates/axum-utils/Cargo.toml
@@ -20,7 +20,7 @@ rand = "0.8.5"
 serde = "1.0.151"
 serde_with = "2.1.0"
 serde_urlencoded = "0.7.1"
-serde_json = "1.0.89"
+serde_json = "1.0.91"
 sqlx = "0.6.2"
 thiserror = "1.0.37"
 tokio = "1.23.0"
diff --git a/crates/cli/Cargo.toml b/crates/cli/Cargo.toml
index 4564b6324..6132327f0 100644
--- a/crates/cli/Cargo.toml
+++ b/crates/cli/Cargo.toml
@@ -18,7 +18,7 @@ listenfd = "1.0.0"
 rand = "0.8.5"
 rand_chacha = "0.3.1"
 rustls = "0.20.7"
-serde_json = "1.0.89"
+serde_json = "1.0.91"
 serde_yaml = "0.9.16"
 sqlx = { version = "0.6.2", features = ["runtime-tokio-rustls", "postgres"] }
 tokio = { version = "1.23.0", features = ["full"] }
diff --git a/crates/config/Cargo.toml b/crates/config/Cargo.toml
index e33851605..df40a94be 100644
--- a/crates/config/Cargo.toml
+++ b/crates/config/Cargo.toml
@@ -22,7 +22,7 @@ url = { version = "2.3.1", features = ["serde"] }
 
 serde = { version = "1.0.151", features = ["derive"] }
 serde_with = { version = "2.1.0", features = ["hex", "chrono"] }
-serde_json = "1.0.89"
+serde_json = "1.0.91"
 
 pem-rfc7468 = "0.6.0"
 rustls-pemfile = "1.0.1"
diff --git a/crates/handlers/Cargo.toml b/crates/handlers/Cargo.toml
index 34755731d..00868a9d6 100644
--- a/crates/handlers/Cargo.toml
+++ b/crates/handlers/Cargo.toml
@@ -36,7 +36,7 @@ sqlx = { version = "0.6.2", features = ["runtime-tokio-rustls", "postgres"] }
 # Various structure (de)serialization
 serde = { version = "1.0.151", features = ["derive"] }
 serde_with = { version = "2.1.0", features = ["hex", "chrono"] }
-serde_json = "1.0.89"
+serde_json = "1.0.91"
 serde_urlencoded = "0.7.1"
 
 # Password hashing
diff --git a/crates/http/Cargo.toml b/crates/http/Cargo.toml
index 4372f2487..0e39b72d4 100644
--- a/crates/http/Cargo.toml
+++ b/crates/http/Cargo.toml
@@ -23,7 +23,7 @@ opentelemetry-semantic-conventions = "0.10.0"
 rustls = { version = "0.20.7", optional = true }
 rustls-native-certs = { version = "0.6.2", optional = true }
 serde = "1.0.151"
-serde_json = "1.0.89"
+serde_json = "1.0.91"
 serde_urlencoded = "0.7.1"
 thiserror = "1.0.37"
 tokio = { version = "1.23.0", features = ["sync", "parking_lot"], optional = true }
diff --git a/crates/jose/Cargo.toml b/crates/jose/Cargo.toml
index 45e60ff9b..cef210000 100644
--- a/crates/jose/Cargo.toml
+++ b/crates/jose/Cargo.toml
@@ -21,7 +21,7 @@ rsa = "0.7.2"
 schemars = "0.8.11"
 sec1 = "0.3.0"
 serde = { version = "1.0.151", features = ["derive"] }
-serde_json = "1.0.89"
+serde_json = "1.0.91"
 serde_with = { version = "2.1.0", features = ["base64"] }
 sha2 = { version = "0.10.6", features = ["oid"] }
 signature = "1.6.4"
diff --git a/crates/oauth2-types/Cargo.toml b/crates/oauth2-types/Cargo.toml
index 59e796705..937e48baf 100644
--- a/crates/oauth2-types/Cargo.toml
+++ b/crates/oauth2-types/Cargo.toml
@@ -8,7 +8,7 @@ license = "Apache-2.0"
 [dependencies]
 http = "0.2.8"
 serde = "1.0.151"
-serde_json = "1.0.89"
+serde_json = "1.0.91"
 language-tags = { version = "0.3.2", features = ["serde"] }
 url = { version = "2.3.1", features = ["serde"] }
 parse-display = "0.7.0"
diff --git a/crates/oidc-client/Cargo.toml b/crates/oidc-client/Cargo.toml
index 01df23839..c0362908c 100644
--- a/crates/oidc-client/Cargo.toml
+++ b/crates/oidc-client/Cargo.toml
@@ -31,7 +31,7 @@ once_cell = "1.16.0"
 mime = "0.3.16"
 rand = "0.8.5"
 serde = { version = "1.0.151", features = ["derive"] }
-serde_json = "1.0.89"
+serde_json = "1.0.91"
 serde_urlencoded = "0.7.1"
 serde_with = "2.1.0"
 thiserror = "1.0.37"
diff --git a/crates/policy/Cargo.toml b/crates/policy/Cargo.toml
index 45f09123f..2640a2234 100644
--- a/crates/policy/Cargo.toml
+++ b/crates/policy/Cargo.toml
@@ -9,7 +9,7 @@ license = "Apache-2.0"
 anyhow = "1.0.68"
 opa-wasm = { git = "https://github.com/matrix-org/rust-opa-wasm.git" }
 serde = { version = "1.0.151", features = ["derive"] }
-serde_json = "1.0.89"
+serde_json = "1.0.91"
 thiserror = "1.0.37"
 tokio = { version = "1.23.0", features = ["io-util"] }
 tracing = "0.1.37"
diff --git a/crates/spa/Cargo.toml b/crates/spa/Cargo.toml
index c01560dee..ef2528b4c 100644
--- a/crates/spa/Cargo.toml
+++ b/crates/spa/Cargo.toml
@@ -7,7 +7,7 @@ license = "Apache-2.0"
 
 [dependencies]
 serde = { version = "1.0.151", features = ["derive"] }
-serde_json = "1.0.89"
+serde_json = "1.0.91"
 thiserror = "1.0.37"
 camino = { version = "1.1.1", features = ["serde1"] }
 headers = "0.3.8"
diff --git a/crates/storage/Cargo.toml b/crates/storage/Cargo.toml
index 7653e5fb6..7bd90fd3f 100644
--- a/crates/storage/Cargo.toml
+++ b/crates/storage/Cargo.toml
@@ -9,7 +9,7 @@ license = "Apache-2.0"
 sqlx = { version = "0.6.2", features = ["runtime-tokio-rustls", "postgres", "migrate", "chrono", "offline", "json", "uuid"] }
 chrono = { version = "0.4.23", features = ["serde"] }
 serde = { version = "1.0.151", features = ["derive"] }
-serde_json = "1.0.89"
+serde_json = "1.0.91"
 thiserror = "1.0.37"
 tracing = "0.1.37"
 
diff --git a/crates/templates/Cargo.toml b/crates/templates/Cargo.toml
index 394ec6a34..4fa6e08c5 100644
--- a/crates/templates/Cargo.toml
+++ b/crates/templates/Cargo.toml
@@ -14,7 +14,7 @@ thiserror = "1.0.37"
 
 tera = "1.17.1"
 serde = { version = "1.0.151", features = ["derive"] }
-serde_json = "1.0.89"
+serde_json = "1.0.91"
 serde_urlencoded = "0.7.1"
 
 camino = "1.1.1"