diff --git a/Cargo.lock b/Cargo.lock
index 0269bff..c48c6d2 100644
--- a/Cargo.lock
+++ b/Cargo.lock
@@ -867,16 +867,19 @@ dependencies = [
 
 [[package]]
 name = "async-tungstenite"
-version = "0.27.0"
+version = "0.33.0"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "c5359381fd414fbdb272c48f2111c16cb0bb3447bfacd59311ff3736da9f6664"
+checksum = "f3b465d66478a9bb84abed46695c44a58e34f3e8d0abfb2e958218d420969049"
 dependencies = [
  "async-std",
+ "atomic-waker",
+ "futures-core",
  "futures-io",
+ "futures-task",
  "futures-util",
  "log",
  "pin-project-lite",
- "tungstenite 0.23.0",
+ "tungstenite",
 ]
 
 [[package]]
@@ -7497,7 +7500,7 @@ dependencies = [
  "futures-util",
  "log",
  "tokio",
- "tungstenite 0.28.0",
+ "tungstenite",
 ]
 
 [[package]]
@@ -7699,24 +7702,6 @@ version = "0.2.5"
 source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "e421abadd41a4225275504ea4d6566923418b7f05506fbc9c0fe86ba7396114b"
 
-[[package]]
-name = "tungstenite"
-version = "0.23.0"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "6e2e2ce1e47ed2994fd43b04c8f618008d4cabdd5ee34027cf14f9d918edd9c8"
-dependencies = [
- "byteorder",
- "bytes",
- "data-encoding",
- "http",
- "httparse",
- "log",
- "rand 0.8.5",
- "sha1",
- "thiserror 1.0.69",
- "utf-8",
-]
-
 [[package]]
 name = "tungstenite"
 version = "0.28.0"
diff --git a/crates/aingle_minimal/Cargo.toml b/crates/aingle_minimal/Cargo.toml
index f4a4aa6..6ee1c13 100644
--- a/crates/aingle_minimal/Cargo.toml
+++ b/crates/aingle_minimal/Cargo.toml
@@ -87,7 +87,7 @@ if-addrs = { version = "0.13", optional = true }
 webrtc = { version = "0.17", optional = true }
 bytes = { version = "1.11", optional = true }
 # WebSocket signaling server for WebRTC
-async-tungstenite = { version = "0.27", features = ["async-std-runtime"], optional = true }
+async-tungstenite = { version = "0.33", features = ["async-std-runtime"], optional = true }
 futures-util = { version = "0.3", default-features = false, features = ["sink"], optional = true }
 
 # QUIC transport (reliable encrypted UDP)