diff --git a/Cargo.lock b/Cargo.lock
index 1444a972f3c..109b581083a 100644
--- a/Cargo.lock
+++ b/Cargo.lock
@@ -2685,13 +2685,13 @@ dependencies = [
 
 [[package]]
 name = "flate2"
-version = "1.1.5"
+version = "1.1.7"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "bfe33edd8e85a12a67454e37f8c75e730830d83e313556ab9ebf9ee7fbeb3bfb"
+checksum = "a2152dbcb980c05735e2a651d96011320a949eb31a0c8b38b72645ce97dec676"
 dependencies = [
  "crc32fast",
- "libz-rs-sys",
  "miniz_oxide",
+ "zlib-rs",
 ]
 
 [[package]]
@@ -3817,15 +3817,6 @@ dependencies = [
  "vcpkg",
 ]
 
-[[package]]
-name = "libz-rs-sys"
-version = "0.5.2"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "840db8cf39d9ec4dd794376f38acc40d0fc65eec2a8f484f7fd375b84602becd"
-dependencies = [
- "zlib-rs",
-]
-
 [[package]]
 name = "libz-sys"
 version = "1.1.23"
@@ -7641,9 +7632,9 @@ dependencies = [
 
 [[package]]
 name = "zlib-rs"
-version = "0.5.2"
+version = "0.5.3"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "2f06ae92f42f5e5c42443fd094f245eb656abf56dd7cce9b8b263236565e00f2"
+checksum = "36134c44663532e6519d7a6dfdbbe06f6f8192bde8ae9ed076e9b213f0e31df7"
 
 [[package]]
 name = "zopfli"
diff --git a/Cargo.toml b/Cargo.toml
index 48094d99528..8314b8e601a 100644
--- a/Cargo.toml
+++ b/Cargo.toml
@@ -100,7 +100,7 @@ diesel-async = { version = "=0.7.4", features = ["async-connection-wrapper", "de
 diesel_full_text_search = "=2.3.0"
 diesel_migrations = { version = "=2.3.1", features = ["postgres"] }
 dotenvy = "=0.15.7"
-flate2 = "=1.1.5"
+flate2 = "=1.1.7"
 futures-util = "=0.3.31"
 hex = "=0.4.3"
 http = "=1.4.0"
diff --git a/crates/crates_io_database_dump/Cargo.toml b/crates/crates_io_database_dump/Cargo.toml
index 9aad355aac2..d89f0cdbd79 100644
--- a/crates/crates_io_database_dump/Cargo.toml
+++ b/crates/crates_io_database_dump/Cargo.toml
@@ -11,7 +11,7 @@ workspace = true
 anyhow = "=1.0.100"
 chrono = { version = "=0.4.42", default-features = false, features = ["clock", "serde"] }
 crates_io_version = { path = "../crates_io_version" }
-flate2 = "=1.1.5"
+flate2 = "=1.1.7"
 minijinja = "=2.13.0"
 serde = { version = "=1.0.228", features = ["derive"] }
 serde_json = "=1.0.145"
diff --git a/crates/crates_io_tarball/Cargo.toml b/crates/crates_io_tarball/Cargo.toml
index 5d1199c7dfb..0530fd65e95 100644
--- a/crates/crates_io_tarball/Cargo.toml
+++ b/crates/crates_io_tarball/Cargo.toml
@@ -13,7 +13,7 @@ builder = ["dep:flate2", "dep:tar"]
 [dependencies]
 astral-tokio-tar = "=0.5.6"
 cargo-manifest = "=0.19.1"
-flate2 = { version = "=1.1.5", optional = true }
+flate2 = { version = "=1.1.7", optional = true }
 serde = { version = "=1.0.228", features = ["derive"] }
 serde_json = "=1.0.145"
 tar = { version = "=0.4.44", optional = true }
@@ -27,7 +27,7 @@ futures-util = "=0.3.31"
 anyhow = "=1.0.100"
 claims = "=0.8.0"
 clap = { version = "=4.5.53", features = ["derive", "unicode", "wrap_help"] }
-flate2 = { version = "=1.1.5" }
+flate2 = { version = "=1.1.7" }
 indicatif = { version = "=0.18.3", features = ["rayon"] }
 insta = "=1.44.3"
 rayon = "=1.11.0"
diff --git a/src/tests/krate/publish/snapshots/integration__krate__publish__manifest__lib_and_bin_crate-4.snap b/src/tests/krate/publish/snapshots/integration__krate__publish__manifest__lib_and_bin_crate-4.snap
index a1efb78dcc5..cae904039eb 100644
--- a/src/tests/krate/publish/snapshots/integration__krate__publish__manifest__lib_and_bin_crate-4.snap
+++ b/src/tests/krate/publish/snapshots/integration__krate__publish__manifest__lib_and_bin_crate-4.snap
@@ -21,9 +21,9 @@ expression: response.json()
       "bar",
       "foo"
     ],
-    "checksum": "2af566e52c8fb0376558a00b0bc426c699e8fe2b12807b75cbce7ccf54e37a98",
+    "checksum": "24666b3fb658f202e37e38e855f9db389441a47565669effd1513f647d93becb",
     "crate": "foo",
-    "crate_size": 251,
+    "crate_size": 252,
     "created_at": "[datetime]",
     "description": "description",
     "dl_path": "/api/v1/crates/foo/1.0.0/download",
diff --git a/src/tests/routes/crates/read.rs b/src/tests/routes/crates/read.rs
index e4c3cc4ea36..d99ea633f22 100644
--- a/src/tests/routes/crates/read.rs
+++ b/src/tests/routes/crates/read.rs
@@ -144,7 +144,7 @@ async fn version_size() {
         .iter()
         .find(|v| v.num == "2.0.0")
         .expect("Could not find v2.0.0");
-    assert_eq!(version2.crate_size, 191);
+    assert_eq!(version2.crate_size, 192);
 }
 
 #[tokio::test(flavor = "multi_thread")]