diff --git a/crates/typst-cli/Cargo.toml b/crates/typst-cli/Cargo.toml
index 808f07a7e..28649591e 100644
--- a/crates/typst-cli/Cargo.toml
+++ b/crates/typst-cli/Cargo.toml
@@ -34,7 +34,7 @@ notify = "5"
 once_cell = "1"
 open = "4.0.2"
 same-file = "1"
-serde = "1"
+serde = ">= 1.0.126, <= 1.0.171"
 serde_json = "1"
 serde_yaml = "0.9"
 siphasher = "0.3"
diff --git a/crates/typst-docs/Cargo.toml b/crates/typst-docs/Cargo.toml
index 470888151..ab28e0ca7 100644
--- a/crates/typst-docs/Cargo.toml
+++ b/crates/typst-docs/Cargo.toml
@@ -18,7 +18,7 @@ heck = "0.4"
 include_dir = "0.7"
 once_cell = "1"
 pulldown-cmark = "0.9"
-serde = { version = "1", features = ["derive"] }
+serde = { version = ">= 1.0.126, <= 1.0.171", features = ["derive"] }
 serde_yaml = "0.8"
 syntect = { version = "5", default-features = false, features = ["parsing", "html", "regex-fancy"] }
 typed-arena = "2"
diff --git a/crates/typst-syntax/Cargo.toml b/crates/typst-syntax/Cargo.toml
index 684e5fb23..af93a5503 100644
--- a/crates/typst-syntax/Cargo.toml
+++ b/crates/typst-syntax/Cargo.toml
@@ -19,7 +19,7 @@ bench = false
 comemo = "0.3"
 ecow = { version = "0.1.1", features = ["serde"] }
 once_cell = "1"
-serde = { version = "1", features = ["derive"] }
+serde = { version = ">= 1.0.126, <= 1.0.171", features = ["derive"] }
 tracing = "0.1.37"
 unicode-ident = "1.0"
 unicode-math-class = "0.1"
diff --git a/crates/typst/Cargo.toml b/crates/typst/Cargo.toml
index f1e7b6add..dc1dcc773 100644
--- a/crates/typst/Cargo.toml
+++ b/crates/typst/Cargo.toml
@@ -38,7 +38,7 @@ regex = "1"
 resvg = { version = "0.32", default-features = false, features = ["raster-images"] }
 roxmltree = "0.18"
 rustybuzz = "0.7"
-serde = { version = "1", features = ["derive"] }
+serde = { version = ">= 1.0.126, <= 1.0.171", features = ["derive"] }
 siphasher = "0.3"
 subsetter = "0.1.1"
 svg2pdf = "0.6"