diff --git a/Cargo.lock b/Cargo.lock
index ad387bcc1142e..e1f325984187a 100644
--- a/Cargo.lock
+++ b/Cargo.lock
@@ -5495,7 +5495,7 @@ dependencies = [
  "hyper 0.14.27",
  "hyper-rustls 0.24.2",
  "log",
- "reqwest 0.11.20",
+ "reqwest 0.11.27",
  "serde",
  "serde_json",
  "thiserror",
@@ -6276,7 +6276,7 @@ dependencies = [
  "parquet 50.0.0",
  "prometheus",
  "regex",
- "reqwest 0.11.20",
+ "reqwest 0.11.27",
  "rust_decimal",
  "serde",
  "serde_bytes",
@@ -7849,7 +7849,7 @@ dependencies = [
  "getrandom",
  "http 0.2.9",
  "rand",
- "reqwest 0.11.20",
+ "reqwest 0.11.27",
  "serde",
  "serde_json",
  "serde_path_to_error",
@@ -7897,7 +7897,7 @@ dependencies = [
  "percent-encoding",
  "quick-xml 0.30.0",
  "rand",
- "reqwest 0.11.20",
+ "reqwest 0.11.27",
  "ring 0.16.20",
  "rustls-pemfile 1.0.4",
  "serde",
@@ -7950,7 +7950,7 @@ dependencies = [
  "prometheus",
  "quick-xml 0.31.0",
  "reqsign",
- "reqwest 0.11.20",
+ "reqwest 0.11.27",
  "serde",
  "serde_json",
  "sha2",
@@ -9159,7 +9159,7 @@ checksum = "e7849dd7319357e220886589ea0a0760ff138cde2eedfbbfd2708caee0b15dfc"
 dependencies = [
  "enum-as-inner 0.6.0",
  "mime",
- "reqwest 0.11.20",
+ "reqwest 0.11.27",
  "serde",
  "time",
  "url",
@@ -9410,7 +9410,7 @@ dependencies = [
  "indoc",
  "libc",
  "memoffset",
- "parking_lot 0.12.1",
+ "parking_lot 0.11.2",
  "portable-atomic",
  "pyo3-build-config",
  "pyo3-ffi",
@@ -9803,7 +9803,7 @@ dependencies = [
  "percent-encoding",
  "quick-xml 0.31.0",
  "rand",
- "reqwest 0.11.20",
+ "reqwest 0.11.27",
  "rsa",
  "rust-ini",
  "serde",
@@ -9814,9 +9814,9 @@ dependencies = [
 
 [[package]]
 name = "reqwest"
-version = "0.11.20"
+version = "0.11.27"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "3e9ad3fe7488d7e34558a2033d45a0c90b72d97b4f80705666fea71472e2e6a1"
+checksum = "dd67538700a17451e7cba03ac727fb961abb7607553461627b97de0b89cf4a62"
 dependencies = [
  "base64 0.21.7",
  "bytes",
@@ -9843,6 +9843,8 @@ dependencies = [
  "serde",
  "serde_json",
  "serde_urlencoded",
+ "sync_wrapper",
+ "system-configuration",
  "tokio",
  "tokio-native-tls",
  "tokio-rustls 0.24.1",
@@ -9851,7 +9853,7 @@ dependencies = [
  "url",
  "wasm-bindgen",
  "wasm-bindgen-futures",
- "wasm-streams 0.3.0",
+ "wasm-streams",
  "web-sys",
  "webpki-roots 0.25.2",
  "winreg 0.50.0",
@@ -9904,7 +9906,7 @@ dependencies = [
  "url",
  "wasm-bindgen",
  "wasm-bindgen-futures",
- "wasm-streams 0.4.0",
+ "wasm-streams",
  "web-sys",
  "webpki-roots 0.26.1",
  "winreg 0.52.0",
@@ -11290,7 +11292,7 @@ dependencies = [
  "madsim-tokio",
  "opendal",
  "prometheus",
- "reqwest 0.11.20",
+ "reqwest 0.12.4",
  "risingwave_common",
  "rustls 0.23.5",
  "spin 0.9.8",
@@ -15491,19 +15493,6 @@ dependencies = [
  "leb128",
 ]
 
-[[package]]
-name = "wasm-streams"
-version = "0.3.0"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "b4609d447824375f43e1ffbc051b50ad8f4b3ae8219680c94452ea05eb240ac7"
-dependencies = [
- "futures-util",
- "js-sys",
- "wasm-bindgen",
- "wasm-bindgen-futures",
- "web-sys",
-]
-
 [[package]]
 name = "wasm-streams"
 version = "0.4.0"
diff --git a/src/common/Cargo.toml b/src/common/Cargo.toml
index e2af368c24a85..3814027d97006 100644
--- a/src/common/Cargo.toml
+++ b/src/common/Cargo.toml
@@ -77,7 +77,7 @@ prometheus = { version = "0.13" }
 prost = { workspace = true }
 rand = { workspace = true }
 regex = "1"
-reqwest = { version = "0.12.2", features = ["json"] }
+reqwest = { version = "0.12.4", features = ["json"] }
 risingwave-fields-derive = { path = "./fields-derive" }
 risingwave_common_estimate_size = { workspace = true }
 risingwave_common_metrics = { path = "./metrics" }
diff --git a/src/connector/Cargo.toml b/src/connector/Cargo.toml
index 64e3d159daa71..88143c7c0fbe0 100644
--- a/src/connector/Cargo.toml
+++ b/src/connector/Cargo.toml
@@ -109,7 +109,7 @@ rdkafka = { workspace = true, features = [
 ] }
 redis = { version = "0.25", features = ["aio", "tokio-comp", "async-std-comp","cluster-async"] }
 regex = "1.4"
-reqwest = { version = "0.12.2", features = ["json", "stream"] }
+reqwest = { version = "0.12.4", features = ["json", "stream"] }
 risingwave_common = { workspace = true }
 risingwave_common_estimate_size = { workspace = true }
 risingwave_jni_core = { workspace = true }
diff --git a/src/meta/dashboard/Cargo.toml b/src/meta/dashboard/Cargo.toml
index a0bd8e96b0b85..4e012b473496f 100644
--- a/src/meta/dashboard/Cargo.toml
+++ b/src/meta/dashboard/Cargo.toml
@@ -14,7 +14,7 @@ axum = { workspace = true }
 axum-embed = "0.1"
 bytes = "1"
 mime_guess = "2"
-reqwest = "0.12.2"
+reqwest = "0.12.4"
 rust-embed = { version = "8", features = ["interpolate-folder-path", "mime-guess"] }
 thiserror-ext = { workspace = true }
 tracing = "0.1"
diff --git a/src/object_store/Cargo.toml b/src/object_store/Cargo.toml
index fa3f50964dcfa..90cdbc8702788 100644
--- a/src/object_store/Cargo.toml
+++ b/src/object_store/Cargo.toml
@@ -30,7 +30,7 @@ itertools = { workspace = true }
 madsim = "0.2.27"
 opendal = "0.45.1"
 prometheus = { version = "0.13", features = ["process"] }
-reqwest = "0.11"                                                              # required by opendal
+reqwest = "0.12"                                                              # required by opendal
 risingwave_common = { workspace = true }
 rustls = "0.23.5"
 spin = "0.9"
diff --git a/src/risedevtool/Cargo.toml b/src/risedevtool/Cargo.toml
index b8a2ca9db14f9..d3e5c53b013dc 100644
--- a/src/risedevtool/Cargo.toml
+++ b/src/risedevtool/Cargo.toml
@@ -29,7 +29,7 @@ itertools = { workspace = true }
 rdkafka = { workspace = true }
 redis = "0.25"
 regex = "1"
-reqwest = { version = "0.12.2", features = ["blocking"] }
+reqwest = { version = "0.12.4", features = ["blocking"] }
 serde = { version = "1", features = ["derive"] }
 serde_json = "1"
 serde_with = "3"
diff --git a/src/utils/pgwire/Cargo.toml b/src/utils/pgwire/Cargo.toml
index 1744fab18d250..05ab203f3cc34 100644
--- a/src/utils/pgwire/Cargo.toml
+++ b/src/utils/pgwire/Cargo.toml
@@ -25,7 +25,7 @@ jsonwebtoken = "9"
 openssl = "0.10.60"
 panic-message = "0.3"
 parking_lot = { workspace = true }
-reqwest = "0.12.2"
+reqwest = "0.12.4"
 risingwave_common = { workspace = true }
 risingwave_sqlparser = { workspace = true }
 serde = { version = "1", features = ["derive"] }