diff --git a/Cargo.lock b/Cargo.lock
index 13194d06e..10ec647ce 100644
--- a/Cargo.lock
+++ b/Cargo.lock
@@ -304,7 +304,7 @@ dependencies = [
  "find-msvc-tools",
  "jobserver",
  "libc",
- "shlex",
+ "shlex 1.3.0",
 ]
 
 [[package]]
@@ -2569,7 +2569,7 @@ dependencies = [
  "serde",
  "serde_derive",
  "serde_json",
- "shlex",
+ "shlex 2.0.1",
  "sysctl",
  "tempfile",
  "thiserror 2.0.18",
@@ -2799,6 +2799,12 @@ version = "1.3.0"
 source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "0fda2ff0d084019ba4d7c6f371c95d8fd75ce3524c3cb8fb653a3023f6323e64"
 
+[[package]]
+name = "shlex"
+version = "2.0.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "f8fadd59c855ef2080decdef8ff161eb6661b86933c9d82e5ba29dc602a55aba"
+
 [[package]]
 name = "simd-adler32"
 version = "0.3.9"
diff --git a/samply/Cargo.toml b/samply/Cargo.toml
index 3f5226f47..4f0a5dcdd 100644
--- a/samply/Cargo.toml
+++ b/samply/Cargo.toml
@@ -51,7 +51,7 @@ env_logger = "0.11"
 cfg-if = "1.0.0"
 fs4 = "0.13"
 humantime = "2.1.0"
-shlex = "1.3.0"
+shlex = "2.0.1"
 samply-debugid = { version = "0.1.0", path = "../samply-debugid" }
 samply-quota-manager = { version = "0.1.0", path = "../samply-quota-manager" }
 samply-object = { version = "0.1.0", path = "../samply-object" }