diff --git a/src-tauri/Cargo.lock b/src-tauri/Cargo.lock
index 6c85f8f..fdedf64 100644
--- a/src-tauri/Cargo.lock
+++ b/src-tauri/Cargo.lock
@@ -293,6 +293,12 @@ version = "0.22.1"
 source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "72b3254f16251a8381aa12e40e3c4d2f0199f8c6508fbecb9d91f575e0fbb8c6"
 
+[[package]]
+name = "base64"
+version = "0.23.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "ac07cdecf99051d9a5238b80f35af32cdeba5b336e55d957b318b50137e18da5"
+
 [[package]]
 name = "bincode"
 version = "1.3.3"
@@ -2704,7 +2710,7 @@ name = "markup"
 version = "1.1.0"
 dependencies = [
  "ammonia",
- "base64 0.22.1",
+ "base64 0.23.1",
  "comrak",
  "criterion",
  "keyring",
diff --git a/src-tauri/Cargo.toml b/src-tauri/Cargo.toml
index a247698..c300e57 100644
--- a/src-tauri/Cargo.toml
+++ b/src-tauri/Cargo.toml
@@ -59,7 +59,7 @@ comrak = { version = "0.54", default-features = false, features = ["syntect-onig
 ammonia = "4"
 
 # Security-scoped bookmark persistence (base64-encode the bookmark blob)
-base64 = "0.22"
+base64 = "0.23"
 
 # B301: extract GitHub repo zipballs into a local vault working copy.
 # Deflate-only — GitHub zipballs never use the other methods.