diff --git a/Cargo.lock b/Cargo.lock
index 11809fa8e..11d92b2ae 100644
--- a/Cargo.lock
+++ b/Cargo.lock
@@ -3932,7 +3932,7 @@ dependencies = [
  "js-sys",
  "p256",
  "p384",
- "pem",
+ "pem 3.0.6",
  "rand 0.8.7",
  "rsa",
  "serde",
@@ -5404,7 +5404,7 @@ dependencies = [
  "nix 0.31.3",
  "notify",
  "p256",
- "pem",
+ "pem 4.0.0",
  "pkcs8 0.11.0",
  "rand_core 0.6.4",
  "rsa",
@@ -6379,6 +6379,16 @@ dependencies = [
  "serde_core",
 ]
 
+[[package]]
+name = "pem"
+version = "4.0.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "d354a98a3d1251555de99e8fdd8afda05573c31b82f59063a7b0a29b5527f120"
+dependencies = [
+ "base64 0.23.0",
+ "serde_core",
+]
+
 [[package]]
 name = "pem-rfc7468"
 version = "0.7.0"
@@ -7216,7 +7226,7 @@ source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "57f6d249aad744e274e682777a50283a225a32705394ee6d5fcc01efa25e4055"
 dependencies = [
  "aws-lc-rs",
- "pem",
+ "pem 3.0.6",
  "rustls-pki-types",
  "time",
  "x509-parser 0.18.1",
diff --git a/crates/key-repository/Cargo.toml b/crates/key-repository/Cargo.toml
index dda1a1362..a072854ff 100644
--- a/crates/key-repository/Cargo.toml
+++ b/crates/key-repository/Cargo.toml
@@ -19,7 +19,7 @@ jsonwebtoken.workspace = true
 nix = { workspace = true, features = ["fs", "user"] }
 notify = "8.2"
 p256 = { version = "0.13", features = ["ecdsa", "pkcs8"] }
-pem = "3"
+pem = "4"
 pkcs8 = { version = "0.11", features = ["pem"] }
 rand_core = { version = "0.6", features = ["std"] }
 rsa = "0.9"