diff --git a/src-tauri/Cargo.lock b/src-tauri/Cargo.lock
index 80aa35d..779c571 100644
--- a/src-tauri/Cargo.lock
+++ b/src-tauri/Cargo.lock
@@ -292,6 +292,12 @@ version = "0.22.1"
 source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "72b3254f16251a8381aa12e40e3c4d2f0199f8c6508fbecb9d91f575e0fbb8c6"
 
+[[package]]
+name = "base64"
+version = "0.23.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "ac07cdecf99051d9a5238b80f35af32cdeba5b336e55d957b318b50137e18da5"
+
 [[package]]
 name = "base64ct"
 version = "1.8.3"
@@ -3695,7 +3701,7 @@ dependencies = [
  "anyhow",
  "arboard",
  "async-trait",
- "base64 0.22.1",
+ "base64 0.23.1",
  "block2",
  "bytes",
  "dispatch2",
diff --git a/src-tauri/Cargo.toml b/src-tauri/Cargo.toml
index 62071f5..f5dbc43 100644
--- a/src-tauri/Cargo.toml
+++ b/src-tauri/Cargo.toml
@@ -42,7 +42,7 @@ jsonwebtoken = { version = "10", features = ["rust_crypto"] }
 # MITM CA lives in the OS trust store) break every request — downloads and
 # Vertex token exchange fail on work machines while the browser works fine.
 reqwest = { version = "0.12", default-features = false, features = ["json", "stream", "rustls-tls-native-roots"] }
-base64 = "0.22"
+base64 = "0.23"
 arboard = "3"
 # Wraps a tokio file as a byte stream so an APK is streamed to GCS instead of
 # being read into memory first.