diff --git a/Cargo.lock b/Cargo.lock
index 384f1fa8c..c17e0f3da 100644
--- a/Cargo.lock
+++ b/Cargo.lock
@@ -675,7 +675,7 @@ dependencies = [
  "sha1",
  "sync_wrapper 1.0.1",
  "tokio",
- "tokio-tungstenite",
+ "tokio-tungstenite 0.24.0",
  "tower 0.5.1",
  "tower-layer",
  "tower-service",
@@ -2644,7 +2644,7 @@ dependencies = [
  "synedrion",
  "thiserror 2.0.7",
  "tokio",
- "tokio-tungstenite",
+ "tokio-tungstenite 0.25.0",
  "tracing",
  "wasm-bindgen",
  "wasm-bindgen-derive",
@@ -2860,7 +2860,7 @@ dependencies = [
  "tdx-quote",
  "thiserror 2.0.7",
  "tokio",
- "tokio-tungstenite",
+ "tokio-tungstenite 0.25.0",
  "tower-http 0.6.2",
  "tracing",
  "tracing-bunyan-formatter",
@@ -14558,7 +14558,19 @@ dependencies = [
  "futures-util",
  "log",
  "tokio",
- "tungstenite",
+ "tungstenite 0.24.0",
+]
+
+[[package]]
+name = "tokio-tungstenite"
+version = "0.25.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "c28562dd8aea311048ed1ab9372a6b9a59977e1b308afb87c985c1f2b3206938"
+dependencies = [
+ "futures-util",
+ "log",
+ "tokio",
+ "tungstenite 0.25.0",
 ]
 
 [[package]]
@@ -15022,6 +15034,24 @@ dependencies = [
  "utf-8",
 ]
 
+[[package]]
+name = "tungstenite"
+version = "0.25.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "326eb16466ed89221beef69dbc94f517ee888bae959895472133924a25f7070e"
+dependencies = [
+ "byteorder",
+ "bytes",
+ "data-encoding",
+ "http 1.1.0",
+ "httparse",
+ "log",
+ "rand",
+ "sha1",
+ "thiserror 2.0.7",
+ "utf-8",
+]
+
 [[package]]
 name = "twox-hash"
 version = "1.6.3"
diff --git a/crates/protocol/Cargo.toml b/crates/protocol/Cargo.toml
index f82dd3b84..d36dccfd8 100644
--- a/crates/protocol/Cargo.toml
+++ b/crates/protocol/Cargo.toml
@@ -35,7 +35,7 @@ num                ="0.4.3"
 
 # Used only with the `server` feature to implement the WsConnection trait
 axum             ={ version="0.7.9", features=["ws"], optional=true }
-tokio-tungstenite={ version="0.24.0", optional=true }
+tokio-tungstenite={ version="0.25.0", optional=true }
 
 # Used only with the `wasm` feature
 gloo-net            ={ version="0.6.0", default-features=false, features=["websocket"], optional=true }
diff --git a/crates/threshold-signature-server/Cargo.toml b/crates/threshold-signature-server/Cargo.toml
index 2356aae20..bc6124436 100644
--- a/crates/threshold-signature-server/Cargo.toml
+++ b/crates/threshold-signature-server/Cargo.toml
@@ -57,7 +57,7 @@ tracing-bunyan-formatter="0.3.10"
 uuid                    ={ version="1.11.0", features=["v4"] }
 
 # Misc
-tokio-tungstenite="0.24.0"
+tokio-tungstenite="0.25.0"
 bincode          ="1.3.3"
 bip32            ={ version="0.5.2" }
 bip39            ={ version="2.1.0", features=["zeroize"] }