diff --git a/Cargo.lock b/Cargo.lock
index af222662..b98daa71 100644
--- a/Cargo.lock
+++ b/Cargo.lock
@@ -1548,11 +1548,10 @@ checksum = "3f9eec918d3f24069decb9af1554cad7c880e2da24a9afd88aca000531ab82c1"
 
 [[package]]
 name = "form_urlencoded"
-version = "1.0.1"
+version = "1.1.0"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "5fc25a87fa4fd2094bffb06925852034d90a17f0d1e05197d4956d3555752191"
+checksum = "a9c384f161156f5260c24a097c56119f9be8c798586aecc13afbcbe7b7e26bf8"
 dependencies = [
- "matches",
  "percent-encoding",
 ]
 
@@ -2032,6 +2031,16 @@ dependencies = [
  "unicode-normalization",
 ]
 
+[[package]]
+name = "idna"
+version = "0.3.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "e14ddfc70884202db2244c223200c204c2bda1bc6e0998d11b5e024d657209e6"
+dependencies = [
+ "unicode-bidi",
+ "unicode-normalization",
+]
+
 [[package]]
 name = "ignore"
 version = "0.4.18"
@@ -2249,7 +2258,7 @@ dependencies = [
  "futures-util",
  "hostname",
  "httpdate",
- "idna",
+ "idna 0.2.3",
  "mime",
  "nom",
  "once_cell",
@@ -3252,9 +3261,9 @@ dependencies = [
 
 [[package]]
 name = "percent-encoding"
-version = "2.1.0"
+version = "2.2.0"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "d4fd5641d01c8f18a23da7b6fe29298ff4b55afcccdf78973b24cf3175fee32e"
+checksum = "478c572c3d73181ff3c2539045f6eb99e5491218eae919370993b890cdbdd98e"
 
 [[package]]
 name = "pest"
@@ -5145,12 +5154,12 @@ checksum = "a156c684c91ea7d62626509bce3cb4e1d9ed5c4d978f7b4352658f96a4c26b4a"
 
 [[package]]
 name = "url"
-version = "2.3.0"
+version = "2.3.1"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "22fe195a4f217c25b25cb5058ced57059824a678474874038dc88d211bf508d3"
+checksum = "0d68c799ae75762b8c3fe375feb6600ef5602c883c5d21eb51c09f22b83c4643"
 dependencies = [
  "form_urlencoded",
- "idna",
+ "idna 0.3.0",
  "percent-encoding",
  "serde",
 ]
diff --git a/crates/axum-utils/Cargo.toml b/crates/axum-utils/Cargo.toml
index 4ef4bb7f..cbc23f70 100644
--- a/crates/axum-utils/Cargo.toml
+++ b/crates/axum-utils/Cargo.toml
@@ -27,7 +27,7 @@ thiserror = "1.0.34"
 tokio = "1.20.1"
 tower = { version = "0.4.13", features = ["util"] }
 tracing = "0.1.36"
-url = "2.3.0"
+url = "2.3.1"
 
 mas-data-model = { path = "../data-model" }
 mas-http = { path = "../http", features = ["client"] }
diff --git a/crates/cli/Cargo.toml b/crates/cli/Cargo.toml
index b1884fec..62c25d02 100644
--- a/crates/cli/Cargo.toml
+++ b/crates/cli/Cargo.toml
@@ -16,7 +16,7 @@ tower = { version = "0.4.13", features = ["full"] }
 hyper = { version = "0.14.20", features = ["full"] }
 serde_yaml = "0.9.11"
 serde_json = "1.0.85"
-url = "2.3.0"
+url = "2.3.1"
 argon2 = { version = "0.4.1", features = ["password-hash"] }
 reqwest = { version = "0.11.11", features = ["rustls-tls"], default-features = false, optional = true }
 watchman_client = "0.8.0"
diff --git a/crates/config/Cargo.toml b/crates/config/Cargo.toml
index c874dd3e..89a50c96 100644
--- a/crates/config/Cargo.toml
+++ b/crates/config/Cargo.toml
@@ -16,7 +16,7 @@ anyhow = "1.0.64"
 schemars = { version = "0.8.10", features = ["url", "chrono"] }
 figment = { version = "0.10.7", features = ["env", "yaml", "test"] }
 chrono = { version = "0.4.22", features = ["serde"] }
-url = { version = "2.3.0", features = ["serde"] }
+url = { version = "2.3.1", features = ["serde"] }
 
 serde = { version = "1.0.144", features = ["derive"] }
 serde_with = { version = "2.0.0", features = ["hex", "chrono"] }
diff --git a/crates/data-model/Cargo.toml b/crates/data-model/Cargo.toml
index b0caf691..0753b301 100644
--- a/crates/data-model/Cargo.toml
+++ b/crates/data-model/Cargo.toml
@@ -9,7 +9,7 @@ license = "Apache-2.0"
 chrono = "0.4.22"
 thiserror = "1.0.34"
 serde = "1.0.144"
-url = { version = "2.3.0", features = ["serde"] }
+url = { version = "2.3.1", features = ["serde"] }
 crc = "3.0.0"
 rand = "0.8.5"
 
diff --git a/crates/handlers/Cargo.toml b/crates/handlers/Cargo.toml
index 3d8ec522..1133d1f3 100644
--- a/crates/handlers/Cargo.toml
+++ b/crates/handlers/Cargo.toml
@@ -41,7 +41,7 @@ argon2 = { version = "0.4.1", features = ["password-hash"] }
 
 # Various data types and utilities
 chrono = { version = "0.4.22", features = ["serde"] }
-url = { version = "2.3.0", features = ["serde"] }
+url = { version = "2.3.1", features = ["serde"] }
 mime = "0.3.16"
 rand = "0.8.5"
 headers = "0.3.8"
diff --git a/crates/jose/Cargo.toml b/crates/jose/Cargo.toml
index 26816e01..fc53624c 100644
--- a/crates/jose/Cargo.toml
+++ b/crates/jose/Cargo.toml
@@ -28,6 +28,6 @@ sha2 = "0.10.5"
 signature = "1.6.0"
 thiserror = "1.0.34"
 tracing = "0.1.36"
-url = { version = "2.3.0", features = ["serde"] }
+url = { version = "2.3.1", features = ["serde"] }
 
 mas-iana = { path = "../iana" }
diff --git a/crates/oauth2-types/Cargo.toml b/crates/oauth2-types/Cargo.toml
index af1546eb..40a10bec 100644
--- a/crates/oauth2-types/Cargo.toml
+++ b/crates/oauth2-types/Cargo.toml
@@ -10,7 +10,7 @@ http = "0.2.8"
 serde = "1.0.144"
 serde_json = "1.0.85"
 language-tags = { version = "0.3.2", features = ["serde"] }
-url = { version = "2.3.0", features = ["serde"] }
+url = { version = "2.3.1", features = ["serde"] }
 parse-display = "0.6.0"
 indoc = "1.0.7"
 serde_with = { version = "2.0.0", features = ["chrono"] }
diff --git a/crates/router/Cargo.toml b/crates/router/Cargo.toml
index 2ca679e2..38b0e06a 100644
--- a/crates/router/Cargo.toml
+++ b/crates/router/Cargo.toml
@@ -10,4 +10,4 @@ axum = { version = "0.6.0-rc.1", default-features = false }
 serde = { version = "1.0.144", features = ["derive"] }
 serde_urlencoded = "0.7.1"
 serde_with = "2.0.0"
-url = "2.3.0"
+url = "2.3.1"
diff --git a/crates/storage/Cargo.toml b/crates/storage/Cargo.toml
index 4c127428..98f42eba 100644
--- a/crates/storage/Cargo.toml
+++ b/crates/storage/Cargo.toml
@@ -19,7 +19,7 @@ tracing = "0.1.36"
 argon2 = { version = "0.4.1", features = ["password-hash"] }
 password-hash = { version = "0.4.2", features = ["std"] }
 rand = "0.8.5"
-url = { version = "2.3.0", features = ["serde"] }
+url = { version = "2.3.1", features = ["serde"] }
 
 oauth2-types = { path = "../oauth2-types" }
 mas-data-model = { path = "../data-model" }
diff --git a/crates/templates/Cargo.toml b/crates/templates/Cargo.toml
index dc29aa62..7d7c80c4 100644
--- a/crates/templates/Cargo.toml
+++ b/crates/templates/Cargo.toml
@@ -21,7 +21,7 @@ serde_json = "1.0.85"
 serde_urlencoded = "0.7.1"
 
 chrono = "0.4.22"
-url = "2.3.0"
+url = "2.3.1"
 
 oauth2-types = { path = "../oauth2-types" }
 mas-data-model = { path = "../data-model" }