diff --git a/actix-http/Cargo.toml b/actix-http/Cargo.toml
index e8f315cb9..7e1a8c55c 100644
--- a/actix-http/Cargo.toml
+++ b/actix-http/Cargo.toml
@@ -106,7 +106,7 @@ h2 = { version = "0.3.24", optional = true }
 
 # websockets
 local-channel = { version = "0.1", optional = true }
-base64 = { version = "0.21", optional = true }
+base64 = { version = "0.22", optional = true }
 rand = { version = "0.8", optional = true }
 sha1 = { version = "0.10", optional = true }
 
diff --git a/actix-web/CHANGES.md b/actix-web/CHANGES.md
index 8fa7ae27d..c6454ed65 100644
--- a/actix-web/CHANGES.md
+++ b/actix-web/CHANGES.md
@@ -2,9 +2,12 @@
 
 ## Unreleased
 
-### Changed
+### Added
 
 - Add `unicode` crate feature (on-by-default) to switch between `regex` and `regex-lite` as a trade-off between full unicode support and binary size.
+
+### Changed
+
 - Minimum supported Rust version (MSRV) is now 1.72.
 
 ## 4.5.1
diff --git a/awc/Cargo.toml b/awc/Cargo.toml
index 14d93ac30..ab88ca814 100644
--- a/awc/Cargo.toml
+++ b/awc/Cargo.toml
@@ -79,7 +79,7 @@ actix-rt = { version = "2.1", default-features = false }
 actix-tls = { version = "3.3", features = ["connect", "uri"] }
 actix-utils = "3"
 
-base64 = "0.21"
+base64 = "0.22"
 bytes = "1"
 cfg-if = "1"
 derive_more = "0.99.5"