diff --git a/Cargo.lock b/Cargo.lock
index 6f18a4607ad36..5550a3a34de2f 100644
--- a/Cargo.lock
+++ b/Cargo.lock
@@ -4223,7 +4223,7 @@ dependencies = [
  "serde",
  "thiserror 2.0.3",
  "time",
- "winnow 0.6.11",
+ "winnow 0.6.26",
 ]
 
 [[package]]
@@ -11820,7 +11820,7 @@ dependencies = [
  "tracing",
  "tracing-subscriber",
  "walkdir",
- "winnow 0.6.11",
+ "winnow 0.7.0",
  "workspace-hack",
 ]
 
@@ -14555,7 +14555,7 @@ dependencies = [
  "serde",
  "serde_spanned",
  "toml_datetime",
- "winnow 0.6.11",
+ "winnow 0.6.26",
 ]
 
 [[package]]
@@ -16204,9 +16204,18 @@ dependencies = [
 
 [[package]]
 name = "winnow"
-version = "0.6.11"
+version = "0.6.26"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "1e90edd2ac1aa278a5c4599b1d89cf03074b610800f866d4026dc199d7929a28"
+dependencies = [
+ "memchr",
+]
+
+[[package]]
+name = "winnow"
+version = "0.7.0"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "56c52728401e1dc672a56e81e593e912aa54c78f40246869f78359a2bf24d29d"
+checksum = "7e49d2d35d3fad69b39b94139037ecfb4f359f08958b9c11e7315ce770462419"
 dependencies = [
  "memchr",
 ]
diff --git a/src/sqlparser/Cargo.toml b/src/sqlparser/Cargo.toml
index 18c1068122d34..e078244f2688b 100644
--- a/src/sqlparser/Cargo.toml
+++ b/src/sqlparser/Cargo.toml
@@ -26,7 +26,7 @@ tokio = { version = "0.2", package = "madsim-tokio", features = [
 ] }
 tracing = "0.1"
 tracing-subscriber = "0.3"
-winnow = "0.6.11"
+winnow = "0.7.0"
 
 [target.'cfg(not(madsim))'.dependencies]
 workspace-hack = { path = "../workspace-hack" }