diff --git a/Cargo.lock b/Cargo.lock
index 724e67761..6467f91d2 100644
--- a/Cargo.lock
+++ b/Cargo.lock
@@ -670,7 +670,7 @@ dependencies = [
  "trust-dns-proto 0.22.0",
  "url",
  "uuid",
- "webpki-roots",
+ "webpki-roots 0.25.2",
 ]
 
 [[package]]
@@ -3009,7 +3009,7 @@ dependencies = [
  "tracing",
  "url",
  "webpki",
- "webpki-roots",
+ "webpki-roots 0.22.6",
 ]
 
 [[package]]
@@ -3281,6 +3281,12 @@ dependencies = [
  "webpki",
 ]
 
+[[package]]
+name = "webpki-roots"
+version = "0.25.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "14247bb57be4f377dfb94c72830b8ce8fc6beac03cf4bf7b9732eadd414123fc"
+
 [[package]]
 name = "widestring"
 version = "1.0.2"
diff --git a/clash_lib/Cargo.toml b/clash_lib/Cargo.toml
index fcc427ea6..cd6c574f3 100644
--- a/clash_lib/Cargo.toml
+++ b/clash_lib/Cargo.toml
@@ -55,7 +55,7 @@ trust-dns-client = "0.22"
 trust-dns-proto = { version = "0.22", features = ["dns-over-rustls", "dns-over-https-rustls"]}
 # DoH
 rustls = { version  = "0.20", features=["dangerous_configuration"] }
-webpki-roots = "0.22"
+webpki-roots = "0.25"
 dhcproto = "0.8"
 
 rand = "0.8"