diff --git a/Cargo.lock b/Cargo.lock
index 9363eb707d3c..9fe4918484cd 100644
--- a/Cargo.lock
+++ b/Cargo.lock
@@ -7181,9 +7181,9 @@ dependencies = [
 
 [[package]]
 name = "ureq"
-version = "1.5.2"
+version = "1.5.4"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "a599426c7388ab189dfd0eeb84c8d879490abc73e3e62a0b6a40e286f6427ab7"
+checksum = "294b85ef5dbc3670a72e82a89971608a1fcc4ed5c7c5a2895230d31a95f0569b"
 dependencies = [
  "base64 0.13.0",
  "chunked_transfer",
diff --git a/secure/json-rpc/Cargo.toml b/secure/json-rpc/Cargo.toml
index 72b6aea67235..63f510ae49d5 100644
--- a/secure/json-rpc/Cargo.toml
+++ b/secure/json-rpc/Cargo.toml
@@ -15,7 +15,7 @@ proptest = { version = "0.10.1", optional = true }
 serde = { version = "1.0.117", features = ["derive"], default-features = false }
 serde_json = "1.0.60"
 thiserror = "1.0.22"
-ureq = { version = "1.5.2", features = ["json", "native-tls"], default-features = false }
+ureq = { version = "1.5.4", features = ["json", "native-tls"], default-features = false }
 
 lcs = { version = "0.1.0", package = "libra-canonical-serialization" }
 diem-crypto = { path = "../../crypto/crypto", version = "0.1.0" }
diff --git a/secure/push-metrics/Cargo.toml b/secure/push-metrics/Cargo.toml
index a540e11834c7..4633bb7b469d 100644
--- a/secure/push-metrics/Cargo.toml
+++ b/secure/push-metrics/Cargo.toml
@@ -10,7 +10,7 @@ publish = false
 edition = "2018"
 
 [dependencies]
-ureq = { version = "1.5.2", features = ["json", "native-tls"], default-features = false }
+ureq = { version = "1.5.4", features = ["json", "native-tls"], default-features = false }
 diem-logger = { path = "../../common/logger", version = "0.1.0" }
 diem-metrics-core = { path = "../../common/metrics-core", version = "0.1.0" }
 diem-workspace-hack = { path = "../../common/workspace-hack", version = "0.1.0" }
diff --git a/secure/storage/github/Cargo.toml b/secure/storage/github/Cargo.toml
index 82281f9f252a..7529e3ce4cb6 100644
--- a/secure/storage/github/Cargo.toml
+++ b/secure/storage/github/Cargo.toml
@@ -13,7 +13,7 @@ edition = "2018"
 serde = { version = "1.0.117", features = ["derive"], default-features = false }
 serde_json = "1.0.60"
 thiserror = "1.0.22"
-ureq = { version = "1.5.2", features = ["json", "native-tls"], default-features = false }
+ureq = { version = "1.5.4", features = ["json", "native-tls"], default-features = false }
 
 diem-workspace-hack = { path = "../../../common/workspace-hack", version = "0.1.0" }
 
diff --git a/secure/storage/vault/Cargo.toml b/secure/storage/vault/Cargo.toml
index 6d38d899ed91..d23d6a887135 100644
--- a/secure/storage/vault/Cargo.toml
+++ b/secure/storage/vault/Cargo.toml
@@ -18,7 +18,7 @@ native-tls = "0.2.6"
 serde = { version = "1.0.117", features = ["derive"], default-features = false }
 serde_json = "1.0.60"
 thiserror = "1.0.22"
-ureq = { version = "1.5.2", features = ["json", "native-tls"], default-features = false }
+ureq = { version = "1.5.4", features = ["json", "native-tls"], default-features = false }
 
 diem-crypto = { path = "../../../crypto/crypto", version = "0.1.0" }
 diem-proptest-helpers = { path = "../../../common/proptest-helpers", version = "0.1.0", optional = true }
diff --git a/testsuite/diem-fuzzer/Cargo.toml b/testsuite/diem-fuzzer/Cargo.toml
index 6b775a6a0b21..7ada218d303e 100644
--- a/testsuite/diem-fuzzer/Cargo.toml
+++ b/testsuite/diem-fuzzer/Cargo.toml
@@ -21,7 +21,7 @@ serde_json = "1.0.60"
 sha-1 = { version = "0.9.2", default-features = false }
 structopt = "0.3.21"
 rand = "0.7.3"
-ureq = { version = "1.5.2", features = ["json", "native-tls"], default-features = false }
+ureq = { version = "1.5.4", features = ["json", "native-tls"], default-features = false }
 
 lcs = { version = "0.1.0", package = "libra-canonical-serialization" }
 diem-proptest-helpers = { path = "../../common/proptest-helpers", version = "0.1.0" }