diff --git a/Cargo.lock b/Cargo.lock
index fe278836..8a081bfe 100644
--- a/Cargo.lock
+++ b/Cargo.lock
@@ -2229,9 +2229,9 @@ checksum = "1261fe7e33c73b354eab43b1273a57c8f967d0391e80353e51f764ac02cf6775"
 
 [[package]]
 name = "openssl"
-version = "0.10.69"
+version = "0.10.70"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "f5e534d133a060a3c19daec1eb3e98ec6f4685978834f2dbadfe2ec215bab64e"
+checksum = "61cfb4e166a8bb8c9b55c500bc2308550148ece889be90f609377e58140f42c6"
 dependencies = [
  "bitflags 2.7.0",
  "cfg-if",
@@ -2270,9 +2270,9 @@ dependencies = [
 
 [[package]]
 name = "openssl-sys"
-version = "0.9.104"
+version = "0.9.105"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "45abf306cbf99debc8195b66b7346498d7b10c210de50418b5ccd7ceba08c741"
+checksum = "8b22d5b84be05a8d6947c7cb71f7c849aa0f112acd4bf51c2a7c1c988ac0a9dc"
 dependencies = [
  "cc",
  "libc",
diff --git a/bazelfe-bazel-wrapper/Cargo.toml b/bazelfe-bazel-wrapper/Cargo.toml
index 49c8b827..c58cfb2a 100644
--- a/bazelfe-bazel-wrapper/Cargo.toml
+++ b/bazelfe-bazel-wrapper/Cargo.toml
@@ -43,7 +43,7 @@ tempfile = { version = "3.16.0", optional = true }
 tower = "0.4.13"
 mio = "1.0.3"
 ptyprocess = "0.4.1"
-openssl = { version = "0.10.69", features = ["vendored"] }
+openssl = { version = "0.10.70", features = ["vendored"] }
 
 [build-dependencies]
 
diff --git a/bazelfe-core/Cargo.toml b/bazelfe-core/Cargo.toml
index 1dab5eac..be8f3aa6 100644
--- a/bazelfe-core/Cargo.toml
+++ b/bazelfe-core/Cargo.toml
@@ -56,7 +56,7 @@ lazy_static = "1.5.0"
 ignore = "0.4.20"
 log = "0.4.25"
 nom = "7.1.3"
-openssl = { version = "0.10.69", features = ["vendored"] }
+openssl = { version = "0.10.70", features = ["vendored"] }
 pretty_env_logger = "0.5.0"
 prost = "0.12.6"
 prost-types = "0.12.6"
diff --git a/bazelfe-protos/Cargo.toml b/bazelfe-protos/Cargo.toml
index 376d3bbe..8865c782 100644
--- a/bazelfe-protos/Cargo.toml
+++ b/bazelfe-protos/Cargo.toml
@@ -12,7 +12,7 @@ prost = "0.12.6"
 prost-types = "0.12.6"
 sha2 = "0.10.8"
 thiserror = "2.0.11"
-openssl = { version = "0.10.69", features = ["vendored"] }
+openssl = { version = "0.10.70", features = ["vendored"] }
 
 [dependencies.tokio]
 features = ["full"]
diff --git a/bzl-remote-core/Cargo.toml b/bzl-remote-core/Cargo.toml
index 0b9197e8..15f1d869 100644
--- a/bzl-remote-core/Cargo.toml
+++ b/bzl-remote-core/Cargo.toml
@@ -24,7 +24,7 @@ bytes = "1.9.0"
 clap = { version = "4.5.27", features = ["derive", "env"] }
 base64 = "0.22.1"
 lazy_static = "1.5.0"
-openssl = { version = "0.10.69", features = ["vendored"] }
+openssl = { version = "0.10.70", features = ["vendored"] }
 tracing = "0.1.41"
 tracing-attributes = "0.1"
 tracing-appender = "0.2"