diff --git a/Cargo.toml b/Cargo.toml
index 8a86430724..2a20b53804 100644
--- a/Cargo.toml
+++ b/Cargo.toml
@@ -540,7 +540,7 @@ rand_chacha = "0.3.1"
 ron = "0.8.0"
 flate2 = "1.0"
 serde = { version = "1", features = ["derive"] }
-serde_json = "1"
+serde_json = "1.0.140"
 bytemuck = "1.7"
 bevy_render = { path = "crates/bevy_render", version = "0.16.0", default-features = false }
 # The following explicit dependencies are needed for proc macros to work inside of examples as they are part of the bevy crate itself.
diff --git a/crates/bevy_gltf/Cargo.toml b/crates/bevy_gltf/Cargo.toml
index ef99cc2bbd..a31828f6c3 100644
--- a/crates/bevy_gltf/Cargo.toml
+++ b/crates/bevy_gltf/Cargo.toml
@@ -62,7 +62,7 @@ fixedbitset = "0.5"
 itertools = "0.14"
 percent-encoding = "2.1"
 serde = { version = "1.0", features = ["derive"] }
-serde_json = "1"
+serde_json = "1.0.140"
 smallvec = "1.11"
 tracing = { version = "0.1", default-features = false, features = ["std"] }
 
diff --git a/crates/bevy_reflect/Cargo.toml b/crates/bevy_reflect/Cargo.toml
index f37865f9a3..483d2782f7 100644
--- a/crates/bevy_reflect/Cargo.toml
+++ b/crates/bevy_reflect/Cargo.toml
@@ -123,7 +123,7 @@ wgpu-types = { version = "24", features = [
 ron = "0.8.0"
 rmp-serde = "1.1"
 bincode = { version = "2.0", features = ["serde"] }
-serde_json = "1.0"
+serde_json = "1.0.140"
 serde = { version = "1", features = ["derive"] }
 static_assertions = "1.1.0"
 
diff --git a/crates/bevy_remote/Cargo.toml b/crates/bevy_remote/Cargo.toml
index 3ccbcbdc3e..a2b8e7d994 100644
--- a/crates/bevy_remote/Cargo.toml
+++ b/crates/bevy_remote/Cargo.toml
@@ -31,7 +31,7 @@ bevy_platform = { path = "../bevy_platform", version = "0.16.0", default-feature
 anyhow = "1"
 hyper = { version = "1", features = ["server", "http1"] }
 serde = { version = "1", features = ["derive"] }
-serde_json = { version = "1" }
+serde_json = "1.0.140"
 http-body-util = "0.1"
 async-channel = "2"