diff --git a/Cargo.lock b/Cargo.lock
index ab2febb9..b56ac086 100644
--- a/Cargo.lock
+++ b/Cargo.lock
@@ -263,9 +263,9 @@ dependencies = [
 
 [[package]]
 name = "brotli"
-version = "3.5.0"
+version = "5.0.0"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "d640d25bc63c50fb1f0b545ffd80207d2e10a4c965530809b40ba3386825c391"
+checksum = "19483b140a7ac7174d34b5a581b406c64f84da5409d3e09cf4fff604f9270e67"
 dependencies = [
  "alloc-no-stdlib",
  "alloc-stdlib",
@@ -274,9 +274,9 @@ dependencies = [
 
 [[package]]
 name = "brotli-decompressor"
-version = "2.5.1"
+version = "4.0.0"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "4e2e4afe60d7dd600fdd3de8d0f08c2b7ec039712e3b6137ff98b7004e82de4f"
+checksum = "e6221fe77a248b9117d431ad93761222e1cf8ff282d9d1d5d9f53d6299a1cf76"
 dependencies = [
  "alloc-no-stdlib",
  "alloc-stdlib",
diff --git a/crates/cli/Cargo.toml b/crates/cli/Cargo.toml
index 3ffb8e84..040b0fbd 100644
--- a/crates/cli/Cargo.toml
+++ b/crates/cli/Cargo.toml
@@ -18,7 +18,7 @@ experimental_event_loop = []
 wizer = { workspace = true }
 structopt = "0.3"
 anyhow = { workspace = true }
-brotli = "3.5.0"
+brotli = "5.0.0"
 wasmprinter = { version = "0.202.0", optional = true }
 wasmtime = { workspace = true }
 wasmtime-wasi = { workspace = true }
diff --git a/supply-chain/config.toml b/supply-chain/config.toml
index 60d8408f..7511018a 100644
--- a/supply-chain/config.toml
+++ b/supply-chain/config.toml
@@ -107,11 +107,11 @@ version = "0.10.4"
 criteria = "safe-to-deploy"
 
 [[exemptions.brotli]]
-version = "3.5.0"
+version = "5.0.0"
 criteria = "safe-to-deploy"
 
 [[exemptions.brotli-decompressor]]
-version = "2.5.1"
+version = "4.0.0"
 criteria = "safe-to-deploy"
 
 [[exemptions.bumpalo]]