diff --git a/actix-web/CHANGES.md b/actix-web/CHANGES.md
index 518a02507..aaab7ff96 100644
--- a/actix-web/CHANGES.md
+++ b/actix-web/CHANGES.md
@@ -16,6 +16,7 @@
 - The `Compress` middleware no longer compresses image or video content.
 - Hide sensitive header values in `HttpRequest`'s `Debug` output.
 - Minimum supported Rust version (MSRV) is now 1.68 due to transitive `time` dependency.
+- Bumped URL version for ActixWeb 2.1 --> 2.4
 
 ## 4.3.1 - 2023-02-26
 
diff --git a/actix-web/Cargo.toml b/actix-web/Cargo.toml
index 4322fb871..18af7525d 100644
--- a/actix-web/Cargo.toml
+++ b/actix-web/Cargo.toml
@@ -96,7 +96,7 @@ serde_urlencoded = "0.7"
 smallvec = "1.6.1"
 socket2 = "0.5"
 time = { version = "0.3", default-features = false, features = ["formatting"] }
-url = "2.1"
+url = "^2.4"
 
 [dev-dependencies]
 actix-files = "0.6"