diff --git a/Cargo.lock b/Cargo.lock
index f182e288..f798be45 100644
--- a/Cargo.lock
+++ b/Cargo.lock
@@ -5376,9 +5376,9 @@ dependencies = [
 
 [[package]]
 name = "serde_json"
-version = "1.0.97"
+version = "1.0.99"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "bdf3bf93142acad5821c99197022e170842cdbc1c30482b98750c688c640842a"
+checksum = "46266871c240a00b8f503b877622fe33430b3c7d963bdc0f2adc511e54a1eae3"
 dependencies = [
  "itoa",
  "ryu",
diff --git a/crates/axum-utils/Cargo.toml b/crates/axum-utils/Cargo.toml
index 296579f4..926c86a9 100644
--- a/crates/axum-utils/Cargo.toml
+++ b/crates/axum-utils/Cargo.toml
@@ -21,7 +21,7 @@ sentry = { version = "0.31.5", default-features = false }
 serde = "1.0.164"
 serde_with = "3.0.0"
 serde_urlencoded = "0.7.1"
-serde_json = "1.0.97"
+serde_json = "1.0.99"
 thiserror = "1.0.40"
 tokio = "1.28.2"
 tower = { version = "0.4.13", features = ["util"] }
diff --git a/crates/cli/Cargo.toml b/crates/cli/Cargo.toml
index fcdea8d8..e35e3064 100644
--- a/crates/cli/Cargo.toml
+++ b/crates/cli/Cargo.toml
@@ -20,7 +20,7 @@ listenfd = "1.0.1"
 rand = "0.8.5"
 rand_chacha = "0.3.1"
 rustls = "0.21.2"
-serde_json = "1.0.97"
+serde_json = "1.0.99"
 serde_yaml = "0.9.21"
 sqlx = { version = "0.6.3", features = ["runtime-tokio-rustls", "postgres"] }
 tokio = { version = "1.28.2", features = ["full"] }
diff --git a/crates/config/Cargo.toml b/crates/config/Cargo.toml
index cd659431..3adc50d3 100644
--- a/crates/config/Cargo.toml
+++ b/crates/config/Cargo.toml
@@ -22,7 +22,7 @@ url = { version = "2.4.0", features = ["serde"] }
 
 serde = { version = "1.0.164", features = ["derive"] }
 serde_with = { version = "3.0.0", features = ["hex", "chrono"] }
-serde_json = "1.0.97"
+serde_json = "1.0.99"
 
 pem-rfc7468 = "0.7.0"
 rustls-pemfile = "1.0.2"
diff --git a/crates/handlers/Cargo.toml b/crates/handlers/Cargo.toml
index a65d275d..7277abd3 100644
--- a/crates/handlers/Cargo.toml
+++ b/crates/handlers/Cargo.toml
@@ -37,7 +37,7 @@ sqlx = { version = "0.6.3", features = ["runtime-tokio-rustls", "postgres"] }
 # Various structure (de)serialization
 serde = { version = "1.0.164", features = ["derive"] }
 serde_with = { version = "3.0.0", features = ["hex", "chrono"] }
-serde_json = "1.0.97"
+serde_json = "1.0.99"
 serde_urlencoded = "0.7.1"
 
 # Password hashing
diff --git a/crates/http/Cargo.toml b/crates/http/Cargo.toml
index d3cb9c9d..9f5cea3e 100644
--- a/crates/http/Cargo.toml
+++ b/crates/http/Cargo.toml
@@ -21,7 +21,7 @@ opentelemetry = "0.19.0"
 rustls = { version = "0.21.2", optional = true }
 rustls-native-certs = { version = "0.6.3", optional = true }
 serde = "1.0.164"
-serde_json = "1.0.97"
+serde_json = "1.0.99"
 serde_urlencoded = "0.7.1"
 thiserror = "1.0.40"
 tokio = { version = "1.28.2", features = ["sync", "parking_lot"], optional = true }
diff --git a/crates/jose/Cargo.toml b/crates/jose/Cargo.toml
index 19b36fe5..917475f8 100644
--- a/crates/jose/Cargo.toml
+++ b/crates/jose/Cargo.toml
@@ -21,7 +21,7 @@ rsa = "0.9.2"
 schemars = "0.8.12"
 sec1 = "0.7.2"
 serde = { version = "1.0.164", features = ["derive"] }
-serde_json = "1.0.97"
+serde_json = "1.0.99"
 serde_with = { version = "3.0.0", features = ["base64"] }
 sha2 = { version = "0.10.7", features = ["oid"] }
 signature = "2.1.0"
diff --git a/crates/oauth2-types/Cargo.toml b/crates/oauth2-types/Cargo.toml
index f1a45948..281639d0 100644
--- a/crates/oauth2-types/Cargo.toml
+++ b/crates/oauth2-types/Cargo.toml
@@ -8,7 +8,7 @@ license = "Apache-2.0"
 [dependencies]
 http = "0.2.9"
 serde = "1.0.164"
-serde_json = "1.0.97"
+serde_json = "1.0.99"
 language-tags = { version = "0.3.2", features = ["serde"] }
 url = { version = "2.4.0", features = ["serde"] }
 parse-display = "0.8.1"
diff --git a/crates/oidc-client/Cargo.toml b/crates/oidc-client/Cargo.toml
index a63b26b3..20e3fea5 100644
--- a/crates/oidc-client/Cargo.toml
+++ b/crates/oidc-client/Cargo.toml
@@ -31,7 +31,7 @@ once_cell = "1.18.0"
 mime = "0.3.17"
 rand = "0.8.5"
 serde = { version = "1.0.164", features = ["derive"] }
-serde_json = "1.0.97"
+serde_json = "1.0.99"
 serde_urlencoded = "0.7.1"
 serde_with = "3.0.0"
 thiserror = "1.0.40"
diff --git a/crates/policy/Cargo.toml b/crates/policy/Cargo.toml
index 7623f345..deafe433 100644
--- a/crates/policy/Cargo.toml
+++ b/crates/policy/Cargo.toml
@@ -9,7 +9,7 @@ license = "Apache-2.0"
 anyhow = "1.0.71"
 opa-wasm = { git = "https://github.com/matrix-org/rust-opa-wasm.git" }
 serde = { version = "1.0.164", features = ["derive"] }
-serde_json = "1.0.97"
+serde_json = "1.0.99"
 thiserror = "1.0.40"
 tokio = { version = "1.28.2", features = ["io-util"] }
 tracing = "0.1.37"
diff --git a/crates/spa/Cargo.toml b/crates/spa/Cargo.toml
index 66108134..7983e4c4 100644
--- a/crates/spa/Cargo.toml
+++ b/crates/spa/Cargo.toml
@@ -7,7 +7,7 @@ license = "Apache-2.0"
 
 [dependencies]
 serde = { version = "1.0.164", features = ["derive"] }
-serde_json = "1.0.97"
+serde_json = "1.0.99"
 thiserror = "1.0.40"
 camino = { version = "1.1.4", features = ["serde1"] }
 headers = "0.3.8"
diff --git a/crates/storage-pg/Cargo.toml b/crates/storage-pg/Cargo.toml
index 1790189d..fde4392a 100644
--- a/crates/storage-pg/Cargo.toml
+++ b/crates/storage-pg/Cargo.toml
@@ -10,7 +10,7 @@ async-trait = "0.1.68"
 sqlx = { version = "0.6.3", features = ["runtime-tokio-rustls", "postgres", "migrate", "chrono", "offline", "json", "uuid"] }
 chrono = { version = "0.4.26", features = ["serde"] }
 serde = { version = "1.0.164", features = ["derive"] }
-serde_json = "1.0.97"
+serde_json = "1.0.99"
 thiserror = "1.0.40"
 tracing = "0.1.37"
 futures-util = "0.3.28"
diff --git a/crates/storage/Cargo.toml b/crates/storage/Cargo.toml
index b56ccc4f..55f9d1b6 100644
--- a/crates/storage/Cargo.toml
+++ b/crates/storage/Cargo.toml
@@ -15,7 +15,7 @@ apalis-core = { version = "0.4.2", features = ["tokio-comp"] }
 opentelemetry = "0.19.0"
 rand_core = "0.6.4"
 serde = "1.0.164"
-serde_json = "1.0.97"
+serde_json = "1.0.99"
 tracing = "0.1.37"
 tracing-opentelemetry = "0.19.0"
 url = "2.4.0"
diff --git a/crates/templates/Cargo.toml b/crates/templates/Cargo.toml
index 1d156010..c336877b 100644
--- a/crates/templates/Cargo.toml
+++ b/crates/templates/Cargo.toml
@@ -14,7 +14,7 @@ thiserror = "1.0.40"
 
 tera = "1.19.0"
 serde = { version = "1.0.164", features = ["derive"] }
-serde_json = "1.0.97"
+serde_json = "1.0.99"
 serde_urlencoded = "0.7.1"
 
 camino = "1.1.4"