diff --git a/Cargo.lock b/Cargo.lock
index 05c651ae3..e2bd4d4f8 100644
--- a/Cargo.lock
+++ b/Cargo.lock
@@ -198,6 +198,12 @@ version = "0.21.7"
 source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "9d297deb1925b89f2ccc13d7635fa0714f12c87adce1c75356b39ca9b7178567"
 
+[[package]]
+name = "base64"
+version = "0.22.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "72b3254f16251a8381aa12e40e3c4d2f0199f8c6508fbecb9d91f575e0fbb8c6"
+
 [[package]]
 name = "base64ct"
 version = "1.6.0"
@@ -2376,7 +2382,7 @@ dependencies = [
 name = "tink-gcpkms"
 version = "0.2.5"
 dependencies = [
- "base64 0.21.7",
+ "base64 0.22.1",
  "chrono",
  "futures",
  "http",
@@ -2430,7 +2436,7 @@ dependencies = [
 name = "tink-proto"
 version = "0.2.5"
 dependencies = [
- "base64 0.21.7",
+ "base64 0.22.1",
  "prost",
  "prost-build",
  "serde",
@@ -2490,7 +2496,7 @@ dependencies = [
 name = "tink-tests"
 version = "0.2.5"
 dependencies = [
- "base64 0.21.7",
+ "base64 0.22.1",
  "ed25519-dalek",
  "generic-array",
  "hex",
diff --git a/integration/gcpkms/Cargo.toml b/integration/gcpkms/Cargo.toml
index 34e40f781..a4414190f 100644
--- a/integration/gcpkms/Cargo.toml
+++ b/integration/gcpkms/Cargo.toml
@@ -12,7 +12,7 @@ keywords = ["cryptography", "tink", "kms", "gcp"]
 categories = ["cryptography"]
 
 [dependencies]
-base64 = "^0.21"
+base64 = "^0.22"
 chrono = "^0.4"
 futures = "^0.3"
 http = "^0.2"
diff --git a/proto/Cargo.toml b/proto/Cargo.toml
index f5dab72f3..680cd182e 100644
--- a/proto/Cargo.toml
+++ b/proto/Cargo.toml
@@ -17,7 +17,7 @@ default = []
 json = ["base64", "serde"]
 
 [dependencies]
-base64 = { version = "^0.21", optional = true }
+base64 = { version = "^0.22", optional = true }
 prost = "^0.11"
 serde = { version = "^1.0.197", features = ["derive"], optional = true }
 
diff --git a/tests/Cargo.toml b/tests/Cargo.toml
index 5a5315a27..6caafa16c 100644
--- a/tests/Cargo.toml
+++ b/tests/Cargo.toml
@@ -11,7 +11,7 @@ categories = ["cryptography"]
 publish = false
 
 [dependencies]
-base64 = "^0.21"
+base64 = "^0.22"
 ed25519-dalek = { version = "2.1.1", features = ["rand_core"] }
 generic-array = "^0.14.7"
 hex = "^0.4.3"
@@ -28,7 +28,7 @@ tink-mac = "^0.2"
 tink-proto = "^0.2"
 
 [dev-dependencies]
-base64 = "^0.21"
+base64 = "^0.22"
 hex = "^0.4.3"
 lazy_static = "^1.4"
 maplit = "^1.0.2"