diff --git a/Cargo.lock b/Cargo.lock
index 9363eb707d3c..56ce53035d4e 100644
--- a/Cargo.lock
+++ b/Cargo.lock
@@ -5085,15 +5085,6 @@ dependencies = [
  "prost",
 ]
 
-[[package]]
-name = "qstring"
-version = "0.7.2"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "d464fae65fff2680baf48019211ce37aaec0c78e9264c84a3e484717f965104e"
-dependencies = [
- "percent-encoding",
-]
-
 [[package]]
 name = "quick-error"
 version = "1.2.3"
@@ -7181,16 +7172,15 @@ dependencies = [
 
 [[package]]
 name = "ureq"
-version = "1.5.2"
+version = "2.5.0"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "a599426c7388ab189dfd0eeb84c8d879490abc73e3e62a0b6a40e286f6427ab7"
+checksum = "b97acb4c28a254fd7a4aeec976c46a7fa404eac4d7c134b30c75144846d7cb8f"
 dependencies = [
  "base64 0.13.0",
  "chunked_transfer",
  "log",
  "native-tls",
  "once_cell",
- "qstring",
  "serde",
  "serde_json",
  "url",
diff --git a/secure/json-rpc/Cargo.toml b/secure/json-rpc/Cargo.toml
index 72b6aea67235..62475aed8a37 100644
--- a/secure/json-rpc/Cargo.toml
+++ b/secure/json-rpc/Cargo.toml
@@ -15,7 +15,7 @@ proptest = { version = "0.10.1", optional = true }
 serde = { version = "1.0.117", features = ["derive"], default-features = false }
 serde_json = "1.0.60"
 thiserror = "1.0.22"
-ureq = { version = "1.5.2", features = ["json", "native-tls"], default-features = false }
+ureq = { version = "2.5.0", features = ["json", "native-tls"], default-features = false }
 
 lcs = { version = "0.1.0", package = "libra-canonical-serialization" }
 diem-crypto = { path = "../../crypto/crypto", version = "0.1.0" }
diff --git a/secure/push-metrics/Cargo.toml b/secure/push-metrics/Cargo.toml
index a540e11834c7..311945b979d1 100644
--- a/secure/push-metrics/Cargo.toml
+++ b/secure/push-metrics/Cargo.toml
@@ -10,7 +10,7 @@ publish = false
 edition = "2018"
 
 [dependencies]
-ureq = { version = "1.5.2", features = ["json", "native-tls"], default-features = false }
+ureq = { version = "2.5.0", features = ["json", "native-tls"], default-features = false }
 diem-logger = { path = "../../common/logger", version = "0.1.0" }
 diem-metrics-core = { path = "../../common/metrics-core", version = "0.1.0" }
 diem-workspace-hack = { path = "../../common/workspace-hack", version = "0.1.0" }
diff --git a/secure/storage/github/Cargo.toml b/secure/storage/github/Cargo.toml
index 82281f9f252a..37a738cf0727 100644
--- a/secure/storage/github/Cargo.toml
+++ b/secure/storage/github/Cargo.toml
@@ -13,7 +13,7 @@ edition = "2018"
 serde = { version = "1.0.117", features = ["derive"], default-features = false }
 serde_json = "1.0.60"
 thiserror = "1.0.22"
-ureq = { version = "1.5.2", features = ["json", "native-tls"], default-features = false }
+ureq = { version = "2.5.0", features = ["json", "native-tls"], default-features = false }
 
 diem-workspace-hack = { path = "../../../common/workspace-hack", version = "0.1.0" }
 
diff --git a/secure/storage/vault/Cargo.toml b/secure/storage/vault/Cargo.toml
index 6d38d899ed91..ea8faa6ba662 100644
--- a/secure/storage/vault/Cargo.toml
+++ b/secure/storage/vault/Cargo.toml
@@ -18,7 +18,7 @@ native-tls = "0.2.6"
 serde = { version = "1.0.117", features = ["derive"], default-features = false }
 serde_json = "1.0.60"
 thiserror = "1.0.22"
-ureq = { version = "1.5.2", features = ["json", "native-tls"], default-features = false }
+ureq = { version = "2.5.0", features = ["json", "native-tls"], default-features = false }
 
 diem-crypto = { path = "../../../crypto/crypto", version = "0.1.0" }
 diem-proptest-helpers = { path = "../../../common/proptest-helpers", version = "0.1.0", optional = true }
diff --git a/testsuite/diem-fuzzer/Cargo.toml b/testsuite/diem-fuzzer/Cargo.toml
index 6b775a6a0b21..06a396e11ae4 100644
--- a/testsuite/diem-fuzzer/Cargo.toml
+++ b/testsuite/diem-fuzzer/Cargo.toml
@@ -21,7 +21,7 @@ serde_json = "1.0.60"
 sha-1 = { version = "0.9.2", default-features = false }
 structopt = "0.3.21"
 rand = "0.7.3"
-ureq = { version = "1.5.2", features = ["json", "native-tls"], default-features = false }
+ureq = { version = "2.5.0", features = ["json", "native-tls"], default-features = false }
 
 lcs = { version = "0.1.0", package = "libra-canonical-serialization" }
 diem-proptest-helpers = { path = "../../common/proptest-helpers", version = "0.1.0" }