diff --git a/Cargo.lock b/Cargo.lock
index 9c981e89d..e6caf77cd 100644
--- a/Cargo.lock
+++ b/Cargo.lock
@@ -1680,7 +1680,7 @@ dependencies = [
  "libc",
  "once_cell",
  "spin",
- "untrusted",
+ "untrusted 0.7.1",
  "web-sys",
  "winapi",
 ]
@@ -1792,7 +1792,7 @@ source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "d53dcdb7c9f8158937a7981b48accfd39a43af418591a5d008c7b22b5e1b7ca4"
 dependencies = [
  "ring",
- "untrusted",
+ "untrusted 0.7.1",
 ]
 
 [[package]]
@@ -2194,7 +2194,7 @@ dependencies = [
  "serde_plain",
  "snafu",
  "tempfile",
- "untrusted",
+ "untrusted 0.9.0",
  "url",
  "walkdir",
 ]
@@ -2364,6 +2364,12 @@ version = "0.7.1"
 source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "a156c684c91ea7d62626509bce3cb4e1d9ed5c4d978f7b4352658f96a4c26b4a"
 
+[[package]]
+name = "untrusted"
+version = "0.9.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "8ecb6da28b8a351d773b68d5825ac39017e680750f980f3a1a85cd8dd28a47c1"
+
 [[package]]
 name = "url"
 version = "2.4.0"
@@ -2516,7 +2522,7 @@ source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "f095d78192e208183081cc07bc5515ef55216397af48b873e5edcd72637fa1bd"
 dependencies = [
  "ring",
- "untrusted",
+ "untrusted 0.7.1",
 ]
 
 [[package]]
diff --git a/tough/Cargo.toml b/tough/Cargo.toml
index ab9a0d4f0..2b4ff0845 100644
--- a/tough/Cargo.toml
+++ b/tough/Cargo.toml
@@ -25,7 +25,7 @@ serde_json = "1"
 serde_plain = "1"
 snafu = "0.7"
 tempfile = "3"
-untrusted = "0.7"
+untrusted = "0.9"
 url = "2"
 walkdir = "2"