diff --git a/Cargo.lock b/Cargo.lock
index 526dc5e..adbe059 100644
--- a/Cargo.lock
+++ b/Cargo.lock
@@ -37,7 +37,7 @@ dependencies = [
  "tracing-subscriber",
  "walkdir",
  "wasm-encoder 0.259.0",
- "wasmparser 0.259.0",
+ "wasmparser 0.261.0",
 ]
 
 [[package]]
@@ -86,7 +86,7 @@ dependencies = [
  "tracing",
  "tracing-subscriber",
  "url",
- "wasmparser 0.259.0",
+ "wasmparser 0.261.0",
  "webbrowser",
  "windows-sys 0.61.2",
 ]
@@ -177,7 +177,7 @@ dependencies = [
  "toml",
  "tracing",
  "tracing-subscriber",
- "wasmparser 0.259.0",
+ "wasmparser 0.261.0",
  "wasmtime",
  "wasmtime-wasi",
  "wasmtime-wasi-http",
@@ -4586,6 +4586,17 @@ name = "wasmparser"
 version = "0.259.0"
 source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "0f7c12eac7bb587801590f6a67ff0bc84d0748513864b71108e4b311cc3df694"
+dependencies = [
+ "bitflags 2.13.2",
+ "indexmap 2.14.2",
+ "semver",
+]
+
+[[package]]
+name = "wasmparser"
+version = "0.261.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "4f20f20e44f7e8aeb6744823ea9d869ede51e51be4fdaedede2852282e54d2d8"
 dependencies = [
  "bitflags 2.13.2",
  "hashbrown 0.17.1",
diff --git a/Cargo.toml b/Cargo.toml
index dc10773..24bb385 100644
--- a/Cargo.toml
+++ b/Cargo.toml
@@ -70,7 +70,7 @@ wildcard_imports = "allow"
 
 [workspace.dependencies]
 act-types = "0.14"
-wasmparser = "0.259.0"
+wasmparser = "0.261.0"
 # The host's own outbound HTTP. `default-features = false` drops `idn` and
 # `public-suffix`: every URL here comes from a metadata document this host
 # already validated, or from a registry reference.