diff --git a/Cargo.lock b/Cargo.lock
index 50b78697de6..9d456363e93 100644
--- a/Cargo.lock
+++ b/Cargo.lock
@@ -2397,9 +2397,9 @@ dependencies = [
 
 [[package]]
 name = "flate2"
-version = "1.1.1"
+version = "1.1.2"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "7ced92e76e966ca2fd84c8f7aa01a4aea65b0eb6648d72f7c8f3e2764a67fece"
+checksum = "4a3d7db9596fecd151c5f638c0ee5d5bd487b6e0ea232e5dc96d5250f6f94b1d"
 dependencies = [
  "crc32fast",
  "libz-rs-sys",
@@ -3503,9 +3503,9 @@ dependencies = [
 
 [[package]]
 name = "libz-rs-sys"
-version = "0.5.0"
+version = "0.5.1"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "6489ca9bd760fe9642d7644e827b0c9add07df89857b0416ee15c1cc1a3b8c5a"
+checksum = "172a788537a2221661b480fee8dc5f96c580eb34fa88764d3205dc356c7e4221"
 dependencies = [
  "zlib-rs",
 ]
@@ -6976,9 +6976,9 @@ dependencies = [
 
 [[package]]
 name = "zlib-rs"
-version = "0.5.0"
+version = "0.5.1"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "868b928d7949e09af2f6086dfc1e01936064cc7a819253bce650d4e2a2d63ba8"
+checksum = "626bd9fa9734751fc50d6060752170984d7053f5a39061f524cda68023d4db8a"
 
 [[package]]
 name = "zopfli"
diff --git a/Cargo.toml b/Cargo.toml
index 1c3309c79c0..c67871710d8 100644
--- a/Cargo.toml
+++ b/Cargo.toml
@@ -89,7 +89,7 @@ diesel-async = { version = "=0.5.2", features = ["async-connection-wrapper", "de
 diesel_full_text_search = "=2.2.0"
 diesel_migrations = { version = "=2.2.0", features = ["postgres"] }
 dotenvy = "=0.15.7"
-flate2 = "=1.1.1"
+flate2 = "=1.1.2"
 futures-util = "=0.3.31"
 hex = "=0.4.3"
 http = "=1.3.1"
diff --git a/crates/crates_io_database_dump/Cargo.toml b/crates/crates_io_database_dump/Cargo.toml
index 90978b8669a..8a04497bca4 100644
--- a/crates/crates_io_database_dump/Cargo.toml
+++ b/crates/crates_io_database_dump/Cargo.toml
@@ -10,7 +10,7 @@ workspace = true
 [dependencies]
 anyhow = "=1.0.98"
 chrono = { version = "=0.4.41", default-features = false, features = ["clock", "serde"] }
-flate2 = "=1.1.1"
+flate2 = "=1.1.2"
 minijinja = "=2.10.2"
 serde = { version = "=1.0.219", features = ["derive"] }
 serde_json = "=1.0.140"
diff --git a/crates/crates_io_tarball/Cargo.toml b/crates/crates_io_tarball/Cargo.toml
index 83a8bb70f42..945c8ee53a0 100644
--- a/crates/crates_io_tarball/Cargo.toml
+++ b/crates/crates_io_tarball/Cargo.toml
@@ -13,7 +13,7 @@ builder = ["dep:flate2", "dep:tar"]
 [dependencies]
 astral-tokio-tar = "=0.5.2"
 cargo-manifest = "=0.19.1"
-flate2 = { version = "=1.1.1", optional = true }
+flate2 = { version = "=1.1.2", optional = true }
 serde = { version = "=1.0.219", features = ["derive"] }
 serde_json = "=1.0.140"
 tar = { version = "=0.4.44", optional = true }
@@ -27,7 +27,7 @@ futures-util = "=0.3.31"
 anyhow = "=1.0.98"
 claims = "=0.8.0"
 clap = { version = "=4.5.39", features = ["derive", "unicode", "wrap_help"] }
-flate2 = { version = "=1.1.1" }
+flate2 = { version = "=1.1.2" }
 indicatif = { version = "=0.17.11", features = ["rayon"] }
 insta = "=1.43.1"
 rayon = "=1.10.0"