diff --git a/Cargo.lock b/Cargo.lock
index 3cb899dd..af222662 100644
--- a/Cargo.lock
+++ b/Cargo.lock
@@ -5145,13 +5145,12 @@ checksum = "a156c684c91ea7d62626509bce3cb4e1d9ed5c4d978f7b4352658f96a4c26b4a"
 
 [[package]]
 name = "url"
-version = "2.2.2"
+version = "2.3.0"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "a507c383b2d33b5fc35d1861e77e6b383d158b2da5e14fe51b83dfedf6fd578c"
+checksum = "22fe195a4f217c25b25cb5058ced57059824a678474874038dc88d211bf508d3"
 dependencies = [
  "form_urlencoded",
  "idna",
- "matches",
  "percent-encoding",
  "serde",
 ]
diff --git a/crates/axum-utils/Cargo.toml b/crates/axum-utils/Cargo.toml
index 8e7295aa..4ef4bb7f 100644
--- a/crates/axum-utils/Cargo.toml
+++ b/crates/axum-utils/Cargo.toml
@@ -27,7 +27,7 @@ thiserror = "1.0.34"
 tokio = "1.20.1"
 tower = { version = "0.4.13", features = ["util"] }
 tracing = "0.1.36"
-url = "2.2.2"
+url = "2.3.0"
 
 mas-data-model = { path = "../data-model" }
 mas-http = { path = "../http", features = ["client"] }
diff --git a/crates/cli/Cargo.toml b/crates/cli/Cargo.toml
index dbfa291e..b1884fec 100644
--- a/crates/cli/Cargo.toml
+++ b/crates/cli/Cargo.toml
@@ -16,7 +16,7 @@ tower = { version = "0.4.13", features = ["full"] }
 hyper = { version = "0.14.20", features = ["full"] }
 serde_yaml = "0.9.11"
 serde_json = "1.0.85"
-url = "2.2.2"
+url = "2.3.0"
 argon2 = { version = "0.4.1", features = ["password-hash"] }
 reqwest = { version = "0.11.11", features = ["rustls-tls"], default-features = false, optional = true }
 watchman_client = "0.8.0"
diff --git a/crates/config/Cargo.toml b/crates/config/Cargo.toml
index 76e1f999..c874dd3e 100644
--- a/crates/config/Cargo.toml
+++ b/crates/config/Cargo.toml
@@ -16,7 +16,7 @@ anyhow = "1.0.64"
 schemars = { version = "0.8.10", features = ["url", "chrono"] }
 figment = { version = "0.10.7", features = ["env", "yaml", "test"] }
 chrono = { version = "0.4.22", features = ["serde"] }
-url = { version = "2.2.2", features = ["serde"] }
+url = { version = "2.3.0", features = ["serde"] }
 
 serde = { version = "1.0.144", features = ["derive"] }
 serde_with = { version = "2.0.0", features = ["hex", "chrono"] }
diff --git a/crates/data-model/Cargo.toml b/crates/data-model/Cargo.toml
index 2a52f8e1..b0caf691 100644
--- a/crates/data-model/Cargo.toml
+++ b/crates/data-model/Cargo.toml
@@ -9,7 +9,7 @@ license = "Apache-2.0"
 chrono = "0.4.22"
 thiserror = "1.0.34"
 serde = "1.0.144"
-url = { version = "2.2.2", features = ["serde"] }
+url = { version = "2.3.0", features = ["serde"] }
 crc = "3.0.0"
 rand = "0.8.5"
 
diff --git a/crates/handlers/Cargo.toml b/crates/handlers/Cargo.toml
index 581e8975..3d8ec522 100644
--- a/crates/handlers/Cargo.toml
+++ b/crates/handlers/Cargo.toml
@@ -41,7 +41,7 @@ argon2 = { version = "0.4.1", features = ["password-hash"] }
 
 # Various data types and utilities
 chrono = { version = "0.4.22", features = ["serde"] }
-url = { version = "2.2.2", features = ["serde"] }
+url = { version = "2.3.0", features = ["serde"] }
 mime = "0.3.16"
 rand = "0.8.5"
 headers = "0.3.8"
diff --git a/crates/jose/Cargo.toml b/crates/jose/Cargo.toml
index 22c8df02..26816e01 100644
--- a/crates/jose/Cargo.toml
+++ b/crates/jose/Cargo.toml
@@ -28,6 +28,6 @@ sha2 = "0.10.5"
 signature = "1.6.0"
 thiserror = "1.0.34"
 tracing = "0.1.36"
-url = { version = "2.2.2", features = ["serde"] }
+url = { version = "2.3.0", features = ["serde"] }
 
 mas-iana = { path = "../iana" }
diff --git a/crates/oauth2-types/Cargo.toml b/crates/oauth2-types/Cargo.toml
index 1b16f4c1..af1546eb 100644
--- a/crates/oauth2-types/Cargo.toml
+++ b/crates/oauth2-types/Cargo.toml
@@ -10,7 +10,7 @@ http = "0.2.8"
 serde = "1.0.144"
 serde_json = "1.0.85"
 language-tags = { version = "0.3.2", features = ["serde"] }
-url = { version = "2.2.2", features = ["serde"] }
+url = { version = "2.3.0", features = ["serde"] }
 parse-display = "0.6.0"
 indoc = "1.0.7"
 serde_with = { version = "2.0.0", features = ["chrono"] }
diff --git a/crates/router/Cargo.toml b/crates/router/Cargo.toml
index f6867573..2ca679e2 100644
--- a/crates/router/Cargo.toml
+++ b/crates/router/Cargo.toml
@@ -10,4 +10,4 @@ axum = { version = "0.6.0-rc.1", default-features = false }
 serde = { version = "1.0.144", features = ["derive"] }
 serde_urlencoded = "0.7.1"
 serde_with = "2.0.0"
-url = "2.2.2"
+url = "2.3.0"
diff --git a/crates/storage/Cargo.toml b/crates/storage/Cargo.toml
index d8396da7..4c127428 100644
--- a/crates/storage/Cargo.toml
+++ b/crates/storage/Cargo.toml
@@ -19,7 +19,7 @@ tracing = "0.1.36"
 argon2 = { version = "0.4.1", features = ["password-hash"] }
 password-hash = { version = "0.4.2", features = ["std"] }
 rand = "0.8.5"
-url = { version = "2.2.2", features = ["serde"] }
+url = { version = "2.3.0", features = ["serde"] }
 
 oauth2-types = { path = "../oauth2-types" }
 mas-data-model = { path = "../data-model" }
diff --git a/crates/templates/Cargo.toml b/crates/templates/Cargo.toml
index e04f6016..dc29aa62 100644
--- a/crates/templates/Cargo.toml
+++ b/crates/templates/Cargo.toml
@@ -21,7 +21,7 @@ serde_json = "1.0.85"
 serde_urlencoded = "0.7.1"
 
 chrono = "0.4.22"
-url = "2.2.2"
+url = "2.3.0"
 
 oauth2-types = { path = "../oauth2-types" }
 mas-data-model = { path = "../data-model" }