diff --git a/Cargo.lock b/Cargo.lock
index df67b3a3f..6754f927a 100644
--- a/Cargo.lock
+++ b/Cargo.lock
@@ -1190,7 +1190,7 @@ checksum = "1323096b05d41827dadeaee54c9981958c0f94e670bc94ed80037d1a7b8b186b"
 dependencies = [
  "bytes 1.1.0",
  "fnv",
- "itoa",
+ "itoa 0.4.8",
 ]
 
 [[package]]
@@ -1247,7 +1247,7 @@ dependencies = [
  "http-body 0.3.1",
  "httparse",
  "httpdate 0.3.2",
- "itoa",
+ "itoa 0.4.8",
  "pin-project 1.0.8",
  "socket2 0.3.19",
  "tokio 0.2.25",
@@ -1271,7 +1271,7 @@ dependencies = [
  "http-body 0.4.4",
  "httparse",
  "httpdate 1.0.1",
- "itoa",
+ "itoa 0.4.8",
  "pin-project-lite 0.2.7",
  "socket2 0.4.2",
  "tokio 1.12.0",
@@ -1355,6 +1355,12 @@ version = "0.4.8"
 source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "b71991ff56294aa922b450139ee08b3bfc70982c6b2c7562771375cf73542dd4"
 
+[[package]]
+name = "itoa"
+version = "1.0.3"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "6c8af84674fe1f223a982c933a0ee1086ac4d4052aa0fb8060c12c6ad838e754"
+
 [[package]]
 name = "jemalloc-sys"
 version = "0.3.2"
@@ -2495,7 +2501,7 @@ dependencies = [
  "combine",
  "dtoa",
  "futures-util",
- "itoa",
+ "itoa 0.4.8",
  "percent-encoding",
  "pin-project-lite 0.1.12",
  "sha1",
@@ -2685,11 +2691,11 @@ dependencies = [
 
 [[package]]
 name = "serde_json"
-version = "1.0.68"
+version = "1.0.85"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "0f690853975602e1bfe1ccbf50504d67174e3bcf340f23b5ea9992e0587a52d8"
+checksum = "e55a28e3aaef9d5ce0506d0a14dbba8054ddc7e499ef522dd8b26859ec9d4a44"
 dependencies = [
- "itoa",
+ "itoa 1.0.3",
  "ryu",
  "serde",
 ]
diff --git a/noria/Cargo.toml b/noria/Cargo.toml
index 89892498f..30be5468d 100644
--- a/noria/Cargo.toml
+++ b/noria/Cargo.toml
@@ -24,7 +24,7 @@ hyper = { version = "0.13.0", features = [ "stream" ] }
 nom-sql = "0.0.11"
 serde = { version = "1.0.8", features = ["rc"] }
 serde_derive = "1.0.8"
-serde_json = "1.0.2"
+serde_json = "1.0.85"
 tokio = { version = "0.2.19", features = ["blocking", "rt-util", "rt-threaded", "net", "io-util", "sync", "time"] }
 bincode = "1.3.0"
 vec_map = { version = "0.8.0", features = ["eders"] }
diff --git a/server/Cargo.toml b/server/Cargo.toml
index 09ad7e140..761eedb98 100644
--- a/server/Cargo.toml
+++ b/server/Cargo.toml
@@ -37,7 +37,7 @@ nom-sql = "0.0.11"
 petgraph = { version = "0.5", features = ["serde-1"] }
 rand = "0.7.0"
 serde_derive = "1.0.8"
-serde_json = "1.0.2"
+serde_json = "1.0.85"
 slog = "2.4.0"
 #slog = { version = "2.4.0", features = ["max_level_trace", "release_max_level_trace"] }
 slog-term = "2.4.0"