diff --git a/src-tauri/Cargo.lock b/src-tauri/Cargo.lock
index 8de4ffa..15ebfb4 100644
--- a/src-tauri/Cargo.lock
+++ b/src-tauri/Cargo.lock
@@ -331,6 +331,12 @@ version = "0.22.1"
 source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "72b3254f16251a8381aa12e40e3c4d2f0199f8c6508fbecb9d91f575e0fbb8c6"
 
+[[package]]
+name = "base64"
+version = "0.23.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "ac07cdecf99051d9a5238b80f35af32cdeba5b336e55d957b318b50137e18da5"
+
 [[package]]
 name = "bit-set"
 version = "0.8.0"
@@ -2674,7 +2680,7 @@ version = "0.5.0"
 dependencies = [
  "anyhow",
  "async-trait",
- "base64 0.22.1",
+ "base64 0.23.1",
  "crossbeam-channel",
  "dirs",
  "fatou",
diff --git a/src-tauri/Cargo.toml b/src-tauri/Cargo.toml
index 356c230..6be277a 100644
--- a/src-tauri/Cargo.toml
+++ b/src-tauri/Cargo.toml
@@ -70,7 +70,7 @@ semver = "1"
 # Encodes image bytes for the markdown preview (images.rs). Base64 over IPC rather than
 # a raw byte response, matching how julIDE already moves image data across the boundary
 # in julia.rs's MIME channel. Already in the lock via reqwest, so no new supply chain.
-base64 = "0.22"
+base64 = "0.23"
 async-trait = "0.1"
 openssl-sys = { version = "0.9", features = ["vendored"], optional = true }
 # The built-in language server. Linked as a library rather than shipped as a