diff --git a/Cargo.lock b/Cargo.lock
index 3e99ba31a..fa7bb3831 100644
--- a/Cargo.lock
+++ b/Cargo.lock
@@ -6830,9 +6830,12 @@ dependencies = [
 
 [[package]]
 name = "webpki-roots"
-version = "0.25.4"
+version = "0.26.3"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "5f20c57d8d7db6d3b86154206ae5d8fba62dd39573114de97c2cb0578251f8e1"
+checksum = "bd7c23921eeb1713a4e851530e9b9756e4fb0e89978582942612524cf09f01cd"
+dependencies = [
+ "rustls-pki-types",
+]
 
 [[package]]
 name = "which"
diff --git a/clash_lib/Cargo.toml b/clash_lib/Cargo.toml
index 616c96fa0..9d4a0a110 100644
--- a/clash_lib/Cargo.toml
+++ b/clash_lib/Cargo.toml
@@ -88,7 +88,7 @@ hickory-proto = { version = "0.24", features = ["dns-over-rustls", "dns-over-htt
 # ideally we should make a CryptoProvider with boringssl and get rid of rings
 rustls = { version  = "0.21", features=["dangerous_configuration", "quic"] }
 rustls-pemfile = "1.0.4"
-webpki-roots = "0.25"
+webpki-roots = "0.26"
 dhcproto = "0.12"
 ring-compat = { version = "0.8", features = ["aead"] }