diff --git a/hphp/hack/src/Cargo.lock b/hphp/hack/src/Cargo.lock
index d9821a1263d11..a87a809dffa4e 100644
--- a/hphp/hack/src/Cargo.lock
+++ b/hphp/hack/src/Cargo.lock
@@ -512,7 +512,7 @@ source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "6798148dccfbff0fae41c7574d2fa8f1ef3492fba0face179de5d8d447d67b05"
 dependencies = [
  "memchr",
- "regex-automata 0.3.3",
+ "regex-automata 0.3.5",
  "serde",
 ]
 
@@ -4335,13 +4335,13 @@ dependencies = [
 
 [[package]]
 name = "regex"
-version = "1.9.1"
+version = "1.9.2"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "b2eae68fc220f7cf2532e4494aded17545fce192d59cd996e0fe7887f4ceb575"
+checksum = "5bc4f4d719ae1d92dc7e5ef3865f93af6e28c7af68ebd7a68a367932b88c1e2c"
 dependencies = [
  "aho-corasick",
  "memchr",
- "regex-automata 0.3.3",
+ "regex-automata 0.3.5",
  "regex-syntax",
 ]
 
@@ -4356,9 +4356,9 @@ dependencies = [
 
 [[package]]
 name = "regex-automata"
-version = "0.3.3"
+version = "0.3.5"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "39354c10dd07468c2e73926b23bb9c2caca74c5501e38a35da70406f1d923310"
+checksum = "26bb2039bb570943fc65037c16640a64fba171d3760138656fdfe62b3bd24239"
 dependencies = [
  "aho-corasick",
  "memchr",
diff --git a/hphp/hack/src/hackc/Cargo.toml b/hphp/hack/src/hackc/Cargo.toml
index e389c9b619021..a76f01f5713ef 100644
--- a/hphp/hack/src/hackc/Cargo.toml
+++ b/hphp/hack/src/hackc/Cargo.toml
@@ -55,7 +55,7 @@ positioned_full_trivia_parser = { version = "0.0.0", path = "../parser/api/cargo
 positioned_parser = { version = "0.0.0", path = "../parser/api/cargo/positioned_parser" }
 profile_rust = { version = "0.0.0", path = "../utils/perf/cargo/profile" }
 rayon = "1.2"
-regex = "1.6.0"
+regex = "1.9.2"
 relative_path = { version = "0.0.0", path = "../utils/rust/relative_path" }
 sem_diff = { version = "0.0.0", path = "sem_diff" }
 serde_json = { version = "1.0.100", features = ["float_roundtrip", "unbounded_depth"] }
diff --git a/hphp/hack/src/hackc/emitter/cargo/emit_unit/Cargo.toml b/hphp/hack/src/hackc/emitter/cargo/emit_unit/Cargo.toml
index fdf0378ab72b1..6828ac2e7df6b 100644
--- a/hphp/hack/src/hackc/emitter/cargo/emit_unit/Cargo.toml
+++ b/hphp/hack/src/hackc/emitter/cargo/emit_unit/Cargo.toml
@@ -36,7 +36,7 @@ options = { version = "0.0.0", path = "../../../compile/cargo/options" }
 oxidized = { version = "0.0.0", path = "../../../../oxidized" }
 oxidized_by_ref = { version = "0.0.0", path = "../../../../oxidized_by_ref" }
 print_expr = { version = "0.0.0", path = "../../../print_expr" }
-regex = "1.6.0"
+regex = "1.9.2"
 scope = { version = "0.0.0", path = "../scope" }
 serde_json = { version = "1.0.100", features = ["float_roundtrip", "unbounded_depth"] }
 stack_depth = { version = "0.0.0", path = "../../../utils/cargo/stack_depth" }
diff --git a/hphp/hack/src/hackc/print_expr/Cargo.toml b/hphp/hack/src/hackc/print_expr/Cargo.toml
index 311521a87796e..a323f60103747 100644
--- a/hphp/hack/src/hackc/print_expr/Cargo.toml
+++ b/hphp/hack/src/hackc/print_expr/Cargo.toml
@@ -21,6 +21,6 @@ hhbc_string_utils = { version = "0.0.0", path = "../utils/cargo/hhbc_string_util
 lazy_static = "1.4"
 naming_special_names_rust = { version = "0.0.0", path = "../../naming" }
 oxidized = { version = "0.0.0", path = "../../oxidized" }
-regex = "1.6.0"
+regex = "1.9.2"
 thiserror = "1.0.43"
 write_bytes = { version = "0.0.0", path = "../../utils/write_bytes/write_bytes" }
diff --git a/hphp/hack/src/hackc/utils/cargo/hhbc_string_utils/Cargo.toml b/hphp/hack/src/hackc/utils/cargo/hhbc_string_utils/Cargo.toml
index 16f82f26503d8..3ed319fda90a6 100644
--- a/hphp/hack/src/hackc/utils/cargo/hhbc_string_utils/Cargo.toml
+++ b/hphp/hack/src/hackc/utils/cargo/hhbc_string_utils/Cargo.toml
@@ -15,7 +15,7 @@ lazy_static = "1.4"
 libc = "0.2.139"
 naming_special_names_rust = { version = "0.0.0", path = "../../../../naming" }
 ocaml_helper = { version = "0.0.0", path = "../../../../utils/ocaml_helper" }
-regex = "1.6.0"
+regex = "1.9.2"
 
 [dev-dependencies]
 pretty_assertions = { version = "1.2", features = ["alloc"], default-features = false }
diff --git a/hphp/hack/src/parser/lowerer/Cargo.toml b/hphp/hack/src/parser/lowerer/Cargo.toml
index fc9e11b4f94e6..7897a2bb07da8 100644
--- a/hphp/hack/src/parser/lowerer/Cargo.toml
+++ b/hphp/hack/src/parser/lowerer/Cargo.toml
@@ -21,7 +21,7 @@ naming_special_names_rust = { version = "0.0.0", path = "../../naming" }
 ocaml_helper = { version = "0.0.0", path = "../../utils/ocaml_helper" }
 oxidized = { version = "0.0.0", path = "../../oxidized" }
 parser_core_types = { version = "0.0.0", path = "../cargo/core_types" }
-regex = "1.6.0"
+regex = "1.9.2"
 relative_path = { version = "0.0.0", path = "../../utils/rust/relative_path" }
 rescan_trivia = { version = "0.0.0", path = "../api/cargo/rescan_trivia" }
 stack_limit = { version = "0.0.0", path = "../../utils/stack_limit" }
diff --git a/hphp/hack/src/utils/config_file/rust/Cargo.toml b/hphp/hack/src/utils/config_file/rust/Cargo.toml
index a040a75bd00fb..3a3cef697d368 100644
--- a/hphp/hack/src/utils/config_file/rust/Cargo.toml
+++ b/hphp/hack/src/utils/config_file/rust/Cargo.toml
@@ -11,6 +11,6 @@ path = "config_file.rs"
 [dependencies]
 bstr = { version = "1.4.0", features = ["serde", "std", "unicode"] }
 lazy_static = "1.4"
-regex = "1.6.0"
+regex = "1.9.2"
 serde_json = { version = "1.0.100", features = ["float_roundtrip", "unbounded_depth"] }
 sha1 = "0.10.5"
diff --git a/hphp/hack/src/utils/files_to_ignore/Cargo.toml b/hphp/hack/src/utils/files_to_ignore/Cargo.toml
index 90bc0082916f9..64ac2428dbbe6 100644
--- a/hphp/hack/src/utils/files_to_ignore/Cargo.toml
+++ b/hphp/hack/src/utils/files_to_ignore/Cargo.toml
@@ -9,4 +9,4 @@ edition = "2021"
 path = "../files_to_ignore.rs"
 
 [dependencies]
-regex = "1.6.0"
+regex = "1.9.2"
diff --git a/hphp/hack/src/utils/hack_macros/cargo/hack_macros_impl/Cargo.toml b/hphp/hack/src/utils/hack_macros/cargo/hack_macros_impl/Cargo.toml
index 7f1806a3aa1a9..2f4416f220bf3 100644
--- a/hphp/hack/src/utils/hack_macros/cargo/hack_macros_impl/Cargo.toml
+++ b/hphp/hack/src/utils/hack_macros/cargo/hack_macros_impl/Cargo.toml
@@ -18,7 +18,7 @@ oxidized = { version = "0.0.0", path = "../../../../oxidized" }
 parser_core_types = { version = "0.0.0", path = "../../../../parser/cargo/core_types" }
 proc-macro2 = { version = "1.0.64", features = ["span-locations"] }
 quote = "1.0.29"
-regex = "1.6.0"
+regex = "1.9.2"
 relative_path = { version = "0.0.0", path = "../../../rust/relative_path" }
 rust_parser_errors = { version = "0.0.0", path = "../../../../parser/cargo/errors" }
 serde = { version = "1.0.176", features = ["derive", "rc"] }
diff --git a/hphp/hack/src/utils/html_entities/Cargo.toml b/hphp/hack/src/utils/html_entities/Cargo.toml
index 92a01892fb2a8..f67e666071ee7 100644
--- a/hphp/hack/src/utils/html_entities/Cargo.toml
+++ b/hphp/hack/src/utils/html_entities/Cargo.toml
@@ -11,7 +11,7 @@ path = "html_entities.rs"
 [dependencies]
 lazy_static = "1.4"
 ocaml_helper = { version = "0.0.0", path = "../ocaml_helper" }
-regex = "1.6.0"
+regex = "1.9.2"
 
 [dev-dependencies]
 pretty_assertions = { version = "1.2", features = ["alloc"], default-features = false }
diff --git a/hphp/hack/src/utils/multifile/Cargo.toml b/hphp/hack/src/utils/multifile/Cargo.toml
index 0d77600f4ff0a..129c9ed400d61 100644
--- a/hphp/hack/src/utils/multifile/Cargo.toml
+++ b/hphp/hack/src/utils/multifile/Cargo.toml
@@ -11,7 +11,7 @@ path = "../multifile.rs"
 [dependencies]
 anyhow = "1.0.71"
 lazy_static = "1.4"
-regex = "1.6.0"
+regex = "1.9.2"
 
 [dev-dependencies]
 pretty_assertions = { version = "1.2", features = ["alloc"], default-features = false }
diff --git a/hphp/hack/src/utils/rust/signed_source/Cargo.toml b/hphp/hack/src/utils/rust/signed_source/Cargo.toml
index 246acbfbe3965..c88347306eb0c 100644
--- a/hphp/hack/src/utils/rust/signed_source/Cargo.toml
+++ b/hphp/hack/src/utils/rust/signed_source/Cargo.toml
@@ -13,5 +13,5 @@ bstr = { version = "1.4.0", features = ["serde", "std", "unicode"] }
 hex = "0.4.3"
 md-5 = "0.10"
 once_cell = "1.12"
-regex = "1.6.0"
+regex = "1.9.2"
 thiserror = "1.0.43"