diff --git a/Cargo.lock b/Cargo.lock
index 80fb77c..a0f39c7 100644
--- a/Cargo.lock
+++ b/Cargo.lock
@@ -1003,7 +1003,7 @@ dependencies = [
  "parking_lot",
  "portable-atomic",
  "quanta",
- "rand 0.9.4",
+ "rand 0.9.5",
  "smallvec",
  "spinning_top",
  "web-time",
@@ -1895,7 +1895,7 @@ dependencies = [
  "nzb-postproc",
  "opentelemetry",
  "parking_lot",
- "rand 0.9.4",
+ "rand 0.10.2",
  "regex",
  "reqwest",
  "serde",
@@ -2156,7 +2156,7 @@ dependencies = [
  "opentelemetry",
  "percent-encoding",
  "portable-atomic",
- "rand 0.9.4",
+ "rand 0.9.5",
  "thiserror 2.0.18",
  "tokio",
  "tokio-stream",
@@ -2304,7 +2304,7 @@ dependencies = [
  "bit-vec",
  "bitflags",
  "num-traits",
- "rand 0.9.4",
+ "rand 0.9.5",
  "rand_chacha",
  "rand_xorshift",
  "regex-syntax",
@@ -2464,9 +2464,9 @@ checksum = "f8dcc9c7d52a811697d2151c701e0d08956f92b0e24136cf4cf27b57a6a0d9bf"
 
 [[package]]
 name = "rand"
-version = "0.9.4"
+version = "0.9.5"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "44c5af06bb1b7d3216d91932aed5265164bf384dc89cd6ba05cf59a35f5f76ea"
+checksum = "b9ef1d0d795eb7d84685bca4f72f3649f064e6641543d3a8c415898726a57b41"
 dependencies = [
  "rand_chacha",
  "rand_core 0.9.5",
diff --git a/Cargo.toml b/Cargo.toml
index 7b5eb79..3272240 100644
--- a/Cargo.toml
+++ b/Cargo.toml
@@ -68,7 +68,7 @@ uuid = { version = "1", features = ["v4", "serde"] }
 chrono = { version = "0.4", features = ["serde"] }
 parking_lot = "0.12"
 arc-swap = "1"
-rand = "0.9"
+rand = "0.10"
 hex = "0.4"
 base64 = "0.22"
 governor = "0.10"
diff --git a/crates/nzb-web/Cargo.toml b/crates/nzb-web/Cargo.toml
index c305033..0d69218 100644
--- a/crates/nzb-web/Cargo.toml
+++ b/crates/nzb-web/Cargo.toml
@@ -31,7 +31,7 @@ anyhow = "1"
 async-trait = "0.1"
 thiserror = "2"
 parking_lot = "0.12"
-rand = "0.9"
+rand = "0.10"
 hex = "0.4"
 base64 = "0.22"
 sha2 = "0.10"