diff --git a/DESCRIPTION b/DESCRIPTION
index 50c850f..eb0874b 100644
--- a/DESCRIPTION
+++ b/DESCRIPTION
@@ -23,7 +23,7 @@ Imports:
     digest (>= 0.6.0),
     furrr (>= 0.3.0),
     httr2 (>= 1.0.0),
-    jsonlite (>= 0.9.16),
+    jsonlite (>= 1.8.8),
     memoise (>= 2.0.0),
     purrr (>= 1.0.0),
     R6 (>= 2.0.0),
diff --git a/NEWS.md b/NEWS.md
index d83bc49..3f3e5af 100644
--- a/NEWS.md
+++ b/NEWS.md
@@ -1,5 +1,7 @@
 # rosv (development version)
 
+* Update jsonlite to address libyajl patches for CVE-2022-24795, CVE-2022-24795, CVE-2023-33460
+
 # rosv 0.5.1
 
 * Missing :: for some functions (e.g. `purrr::list_rbind()`)
diff --git a/renv.lock b/renv.lock
index 5c59f4c..f7415d3 100644
--- a/renv.lock
+++ b/renv.lock
@@ -784,13 +784,13 @@
     },
     "jsonlite": {
       "Package": "jsonlite",
-      "Version": "1.8.7",
+      "Version": "1.8.8",
       "Source": "Repository",
-      "Repository": "CRAN",
+      "Repository": "RSPM",
       "Requirements": [
         "methods"
       ],
-      "Hash": "266a20443ca13c65688b2116d5220f76"
+      "Hash": "e1b9c55281c5adc4dd113652d9e26768"
     },
     "knitr": {
       "Package": "knitr",