diff --git a/Cargo.lock b/Cargo.lock
index 65e8ada79c..cee23682de 100644
--- a/Cargo.lock
+++ b/Cargo.lock
@@ -9285,9 +9285,9 @@ checksum = "ea68304e134ecd095ac6c3574494fc62b909f416c4fca77e440530221e549d3d"
 
 [[package]]
 name = "tough"
-version = "0.12.5"
+version = "0.14.0"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "dc636dd1ee889a366af6731f1b63b60baf19528b46df5a7c2d4b3bf8b60bca2d"
+checksum = "eda3efa9005cf9c1966984c3b9a44c3f37b7ed2c95ba338d6ad51bba70e989a0"
 dependencies = [
  "chrono",
  "dyn-clone",
diff --git a/Cargo.toml b/Cargo.toml
index afdebad6fb..cfb17ac29d 100644
--- a/Cargo.toml
+++ b/Cargo.toml
@@ -365,7 +365,7 @@ tokio-util = "0.7.10"
 toml = "0.8.6"
 toml_edit = "0.20.7"
 topological-sort = "0.2.2"
-tough = { version = "0.12", features = [ "http" ] }
+tough = { version = "0.14", features = [ "http" ] }
 trust-dns-client = "0.22"
 trust-dns-proto = "0.22"
 trust-dns-resolver = "0.22"