diff --git a/Cargo.lock b/Cargo.lock
index 0a62dc5fa..68d979398 100644
--- a/Cargo.lock
+++ b/Cargo.lock
@@ -1147,9 +1147,9 @@ dependencies = [
 
 [[package]]
 name = "rand"
-version = "0.8.5"
+version = "0.8.6"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "34af8d1a0e25924bc5b7c43c079c942339d8f0a8b57c39049bef581b46327404"
+checksum = "5ca0ecfa931c29007047d1bc58e623ab12e5590e8c7cc53200d5202b69266d8a"
 dependencies = [
  "libc",
  "rand_chacha",
diff --git a/soroban-sdk/Cargo.toml b/soroban-sdk/Cargo.toml
index f9c76a8be..48ab93043 100644
--- a/soroban-sdk/Cargo.toml
+++ b/soroban-sdk/Cargo.toml
@@ -39,7 +39,7 @@ serde_json = "1.0.0"
 ed25519-dalek = { version = "2.1.1", features = ["rand_core"], optional = true }
 curve25519-dalek = { version = "4.1.3", features = ["digest"], optional = true }
 # match the version of rand used in dalek
-rand = "0.8.5"
+rand = "0.8.6"
 ctor = { version = "0.5.0", optional = true }
 
 [dev-dependencies]
@@ -49,7 +49,7 @@ soroban-ledger-snapshot = { workspace = true, features = ["testutils"] }
 stellar-xdr = { workspace = true, features = ["curr", "std"] }
 soroban-spec = { workspace = true }
 ed25519-dalek = "2.0.0"
-rand = "0.8.5"
+rand = "0.8.6"
 ctor = "0.5.0"
 hex = "0.4.3"
 arbitrary = { version = "~1.3.0", features = ["derive"] }