diff --git a/Cargo.lock b/Cargo.lock
index 4f67ed049..5a78940d6 100644
--- a/Cargo.lock
+++ b/Cargo.lock
@@ -2521,18 +2521,18 @@ checksum = "94143f37725109f92c262ed2cf5e59bce7498c01bcc1502d7b9afe439a4e9f49"
 
 [[package]]
 name = "serde"
-version = "1.0.198"
+version = "1.0.199"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "9846a40c979031340571da2545a4e5b7c4163bdae79b301d5f86d03979451fcc"
+checksum = "0c9f6e76df036c77cd94996771fb40db98187f096dd0b9af39c6c6e452ba966a"
 dependencies = [
  "serde_derive",
 ]
 
 [[package]]
 name = "serde_derive"
-version = "1.0.198"
+version = "1.0.199"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "e88edab869b01783ba905e7d0153f9fc1a6505a96e4ad3018011eedb838566d9"
+checksum = "11bd257a6541e141e42ca6d24ae26f7714887b47e89aa739099104c7e4d3b7fc"
 dependencies = [
  "proc-macro2",
  "quote",
diff --git a/crates/curp-external-api/Cargo.toml b/crates/curp-external-api/Cargo.toml
index fa55d3f21..ef4d83892 100644
--- a/crates/curp-external-api/Cargo.toml
+++ b/crates/curp-external-api/Cargo.toml
@@ -15,6 +15,6 @@ async-trait = "0.1.80"
 engine = { path = "../engine" }
 mockall = "0.12.1"
 prost = "0.12.3"
-serde = { version = "1.0.130", features = ["derive", "rc"] }
+serde = { version = "1.0.199", features = ["derive", "rc"] }
 thiserror = "1.0.58"
 workspace-hack = { version = "0.1", path = "../../workspace-hack" }
diff --git a/crates/curp-test-utils/Cargo.toml b/crates/curp-test-utils/Cargo.toml
index fad63dccf..705346831 100644
--- a/crates/curp-test-utils/Cargo.toml
+++ b/crates/curp-test-utils/Cargo.toml
@@ -17,7 +17,7 @@ curp-external-api = { path = "../curp-external-api" }
 engine = { path = "../engine" }
 itertools = "0.11"
 prost = "0.12.3"
-serde = { version = "1.0.130", features = ["derive", "rc"] }
+serde = { version = "1.0.199", features = ["derive", "rc"] }
 thiserror = "1.0.58"
 tokio = { version = "0.2.25", package = "madsim-tokio", features = [
   "rt-multi-thread",
diff --git a/crates/curp/Cargo.toml b/crates/curp/Cargo.toml
index 6840614c2..d02111945 100644
--- a/crates/curp/Cargo.toml
+++ b/crates/curp/Cargo.toml
@@ -34,7 +34,7 @@ parking_lot = "0.12.1"
 priority-queue = "2.0.2"
 prost = "0.12.3"
 rand = "0.8.5"
-serde = { version = "1.0.130", features = ["derive", "rc"] }
+serde = { version = "1.0.199", features = ["derive", "rc"] }
 sha2 = "0.10.8"
 thiserror = "1.0.58"
 tokio = { version = "0.2.25", package = "madsim-tokio", features = [
diff --git a/crates/engine/Cargo.toml b/crates/engine/Cargo.toml
index 9e9090d8b..913fa3ddf 100644
--- a/crates/engine/Cargo.toml
+++ b/crates/engine/Cargo.toml
@@ -19,7 +19,7 @@ clippy-utilities = "0.2.0"
 opentelemetry = { version = "0.21.0", features = ["metrics"] }
 parking_lot = "0.12.1"
 rocksdb = { version = "0.22.0", features = ["multi-threaded-cf"] }
-serde = { version = "1.0.152", features = ["derive"] }
+serde = { version = "1.0.199", features = ["derive"] }
 thiserror = "1.0.58"
 tokio = { version = "0.2.25", package = "madsim-tokio", features = [
     "fs",
diff --git a/crates/utils/Cargo.toml b/crates/utils/Cargo.toml
index 4027882ee..22d9dd752 100644
--- a/crates/utils/Cargo.toml
+++ b/crates/utils/Cargo.toml
@@ -29,7 +29,7 @@ parking_lot = { version = "0.12.1", optional = true }
 pbkdf2 = { version = "0.12.2", features = ["simple"] }
 petgraph = "0.6.4"
 rand = "0.8.5"
-serde = { version = "1.0.137", features = ["derive"] }
+serde = { version = "1.0.199", features = ["derive"] }
 thiserror = "1.0.58"
 tokio = { version = "0.2.25", package = "madsim-tokio", features = [
   "sync",
diff --git a/crates/xline/Cargo.toml b/crates/xline/Cargo.toml
index 34b08e864..db99c019b 100644
--- a/crates/xline/Cargo.toml
+++ b/crates/xline/Cargo.toml
@@ -50,7 +50,7 @@ pbkdf2 = { version = "0.12.2", features = ["simple"] }
 priority-queue = "2.0.2"
 prometheus = "0.13.3"
 prost = "0.12.3"
-serde = { version = "1.0.137", features = ["derive"] }
+serde = { version = "1.0.199", features = ["derive"] }
 sha2 = "0.10.6"
 tokio = { version = "0.2.25", package = "madsim-tokio", features = [
   "rt-multi-thread",
diff --git a/crates/xlineapi/Cargo.toml b/crates/xlineapi/Cargo.toml
index 659ee5a88..bfcf2b82b 100644
--- a/crates/xlineapi/Cargo.toml
+++ b/crates/xlineapi/Cargo.toml
@@ -16,7 +16,7 @@ curp = { path = "../curp" }
 curp-external-api = { path = "../curp-external-api" }
 itertools = "0.11"
 prost = "0.12.3"
-serde = { version = "1.0.137", features = ["derive"] }
+serde = { version = "1.0.199", features = ["derive"] }
 thiserror = "1.0.58"
 tonic = { version = "0.4.2", package = "madsim-tonic" }
 utils = { path = "../utils", features = ["parking_lot"] }
diff --git a/crates/xlinectl/Cargo.toml b/crates/xlinectl/Cargo.toml
index d2db1880a..ba76083b0 100644
--- a/crates/xlinectl/Cargo.toml
+++ b/crates/xlinectl/Cargo.toml
@@ -14,7 +14,7 @@ keywords = ["Client", "CommandLine"]
 anyhow = "1.0"
 clap = "4"
 regex = "1.10.4"
-serde = { version = "1.0.137", features = ["derive"] }
+serde = { version = "1.0.199", features = ["derive"] }
 serde_json = "1.0.107"
 shlex = "1.3.0"
 tokio = "1"
diff --git a/crates/xlineutl/Cargo.toml b/crates/xlineutl/Cargo.toml
index badcb8f08..4cb78b710 100644
--- a/crates/xlineutl/Cargo.toml
+++ b/crates/xlineutl/Cargo.toml
@@ -16,7 +16,7 @@ anyhow = "1.0"
 clap = "4"
 crc32fast = "1.4.0"
 engine = { path = "../engine" }
-serde = { version = "1.0.137", features = ["derive"] }
+serde = { version = "1.0.199", features = ["derive"] }
 serde_json = "1.0.107"
 tempfile = "3.10.1"
 tokio = "1"