diff --git a/Cargo.lock b/Cargo.lock
index 7d49dd71..42825c88 100644
--- a/Cargo.lock
+++ b/Cargo.lock
@@ -696,7 +696,7 @@ dependencies = [
  "public-suffix",
  "rand",
  "regex",
- "rustls",
+ "rustls 0.21.7",
  "security-framework",
  "serde",
  "serde_yaml",
@@ -2360,9 +2360,9 @@ dependencies = [
 
 [[package]]
 name = "rustls"
-version = "0.20.8"
+version = "0.20.9"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "fff78fc74d175294f4e83b28343315ffcfb114b156f0185e9741cb5570f50e2f"
+checksum = "1b80e3dec595989ea8510028f30c408a4630db12c9cbb8de34203b89d6577e99"
 dependencies = [
  "log",
  "ring",
@@ -2370,6 +2370,18 @@ dependencies = [
  "webpki",
 ]
 
+[[package]]
+name = "rustls"
+version = "0.21.7"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "cd8d6c9f025a446bc4d18ad9632e69aec8f287aa84499ee335599fabd20c3fd8"
+dependencies = [
+ "log",
+ "ring",
+ "rustls-webpki",
+ "sct",
+]
+
 [[package]]
 name = "rustls-pemfile"
 version = "1.0.3"
@@ -2379,6 +2391,16 @@ dependencies = [
  "base64 0.21.2",
 ]
 
+[[package]]
+name = "rustls-webpki"
+version = "0.101.4"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "7d93931baf2d282fff8d3a532bbfd7653f734643161b87e3e01e59a04439bf0d"
+dependencies = [
+ "ring",
+ "untrusted",
+]
+
 [[package]]
 name = "rustversion"
 version = "1.0.14"
@@ -2882,7 +2904,7 @@ version = "0.23.4"
 source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "c43ee83903113e03984cb9e5cebe6c04a5116269e900e3ddba8f068a62adda59"
 dependencies = [
- "rustls",
+ "rustls 0.20.9",
  "tokio",
  "webpki",
 ]
@@ -3134,7 +3156,7 @@ dependencies = [
  "ipnet",
  "lazy_static",
  "rand",
- "rustls",
+ "rustls 0.20.9",
  "rustls-pemfile",
  "smallvec",
  "thiserror",
diff --git a/clash_lib/Cargo.toml b/clash_lib/Cargo.toml
index 33745c4a..15dded94 100644
--- a/clash_lib/Cargo.toml
+++ b/clash_lib/Cargo.toml
@@ -58,7 +58,7 @@ trust-dns-client = "0.22"
 trust-dns-resolver = "0.22.0"
 trust-dns-proto = { version = "0.22", features = ["dns-over-rustls", "dns-over-https-rustls"]}
 # DoH
-rustls = { version  = "0.20", features=["dangerous_configuration"] }
+rustls = { version  = "0.21", features=["dangerous_configuration"] }
 webpki-roots = "0.22"
 dhcproto = "0.8"