diff --git a/Cargo.lock b/Cargo.lock
index 4fbd5d8b..cacf96d3 100644
--- a/Cargo.lock
+++ b/Cargo.lock
@@ -5406,9 +5406,9 @@ dependencies = [
 
 [[package]]
 name = "tower-http"
-version = "0.3.4"
+version = "0.3.5"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "3c530c8675c1dbf98facee631536fa116b5fb6382d7dd6dc1b118d970eafe3ba"
+checksum = "f873044bf02dd1e8239e9c1293ea39dad76dc594ec16185d0a1bf31d8dc8d858"
 dependencies = [
  "async-compression",
  "bitflags",
diff --git a/crates/cli/Cargo.toml b/crates/cli/Cargo.toml
index 2887ed18..d37a715c 100644
--- a/crates/cli/Cargo.toml
+++ b/crates/cli/Cargo.toml
@@ -24,7 +24,7 @@ serde_json = "1.0.89"
 serde_yaml = "0.9.14"
 tokio = { version = "1.22.0", features = ["full"] }
 tower = { version = "0.4.13", features = ["full"] }
-tower-http = { version = "0.3.4", features = ["fs"] }
+tower-http = { version = "0.3.5", features = ["fs"] }
 url = "2.3.1"
 watchman_client = "0.8.0"
 
diff --git a/crates/handlers/Cargo.toml b/crates/handlers/Cargo.toml
index 17a049c8..c00befe8 100644
--- a/crates/handlers/Cargo.toml
+++ b/crates/handlers/Cargo.toml
@@ -20,7 +20,7 @@ anyhow = "1.0.66"
 # Web server
 hyper = { version = "0.14.23", features = ["full"] }
 tower = "0.4.13"
-tower-http = { version = "0.3.4", features = ["cors"] }
+tower-http = { version = "0.3.5", features = ["cors"] }
 axum = { version = "0.6.1", features = ["ws"] }
 axum-macros = "0.3.0"
 axum-extra = { version = "0.4.2", features = ["cookie-private"] }
diff --git a/crates/http/Cargo.toml b/crates/http/Cargo.toml
index e0337050..06515dd8 100644
--- a/crates/http/Cargo.toml
+++ b/crates/http/Cargo.toml
@@ -28,7 +28,7 @@ serde_urlencoded = "0.7.1"
 thiserror = "1.0.37"
 tokio = { version = "1.22.0", features = ["sync", "parking_lot"], optional = true }
 tower = { version = "0.4.13", features = ["timeout", "limit"] }
-tower-http = { version = "0.3.4", features = ["follow-redirect", "decompression-full", "set-header", "compression-full", "cors", "util"] }
+tower-http = { version = "0.3.5", features = ["follow-redirect", "decompression-full", "set-header", "compression-full", "cors", "util"] }
 tracing = "0.1.37"
 tracing-opentelemetry = "0.18.0"
 webpki = { version = "0.22.0", optional = true }
diff --git a/crates/listener/Cargo.toml b/crates/listener/Cargo.toml
index 372e3414..1636a837 100644
--- a/crates/listener/Cargo.toml
+++ b/crates/listener/Cargo.toml
@@ -14,7 +14,7 @@ pin-project-lite = "0.2.9"
 thiserror = "1.0.37"
 tokio = { version = "1.22.0", features = ["net", "rt", "macros", "signal", "time"] }
 tokio-rustls = "0.23.4"
-tower-http = { version = "0.3.4", features = ["add-extension"] }
+tower-http = { version = "0.3.5", features = ["add-extension"] }
 tower-service = "0.3.2"
 tracing = "0.1.37"
 libc = "0.2.137"
diff --git a/crates/oidc-client/Cargo.toml b/crates/oidc-client/Cargo.toml
index ef5003b6..c76eddd3 100644
--- a/crates/oidc-client/Cargo.toml
+++ b/crates/oidc-client/Cargo.toml
@@ -59,7 +59,7 @@ version = "0.14.23"
 features = ["client", "http1", "http2", "stream", "runtime" ]
 optional = true
 [dependencies.tower-http]
-version = "0.3.4"
+version = "0.3.5"
 features = ["follow-redirect", "decompression-full", "set-header", "timeout"]
 optional = true
 
diff --git a/crates/spa/Cargo.toml b/crates/spa/Cargo.toml
index 0c498692..94cb12a3 100644
--- a/crates/spa/Cargo.toml
+++ b/crates/spa/Cargo.toml
@@ -13,7 +13,7 @@ camino = { version = "1.1.1", features = ["serde1"] }
 headers = "0.3.8"
 http = "0.2.8"
 tower-service = "0.3.2"
-tower-http = { version = "0.3.4", features = ["fs"] }
+tower-http = { version = "0.3.5", features = ["fs"] }
 tokio = { version = "1.22.0", features = ["fs"] }
 
 [[bin]]