diff --git a/Cargo.lock b/Cargo.lock
index 36a46677cd7..54b471216e2 100644
--- a/Cargo.lock
+++ b/Cargo.lock
@@ -1899,9 +1899,9 @@ dependencies = [
 
 [[package]]
 name = "flate2"
-version = "1.0.34"
+version = "1.0.35"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "a1b589b4dc103969ad3cf85c950899926ec64300a1a46d76c03a6072957036f0"
+checksum = "c936bfdafb507ebbf50b8074c54fa31c5be9a1e7e5f467dd659697041407d07c"
 dependencies = [
  "crc32fast",
  "miniz_oxide",
diff --git a/Cargo.toml b/Cargo.toml
index 936c95d5d55..49be509bb9b 100644
--- a/Cargo.toml
+++ b/Cargo.toml
@@ -73,7 +73,7 @@ diesel-async = { version = "=0.5.1", features = ["async-connection-wrapper", "de
 diesel_full_text_search = "=2.2.0"
 diesel_migrations = { version = "=2.2.0", features = ["postgres"] }
 dotenvy = "=0.15.7"
-flate2 = "=1.0.34"
+flate2 = "=1.0.35"
 futures-util = "=0.3.31"
 hex = "=0.4.3"
 http = "=1.1.0"
diff --git a/crates/crates_io_database_dump/Cargo.toml b/crates/crates_io_database_dump/Cargo.toml
index 01d7e5b6d47..6e0785ebced 100644
--- a/crates/crates_io_database_dump/Cargo.toml
+++ b/crates/crates_io_database_dump/Cargo.toml
@@ -10,7 +10,7 @@ workspace = true
 [dependencies]
 anyhow = "=1.0.93"
 chrono = { version = "=0.4.38", default-features = false, features = ["clock", "serde"] }
-flate2 = "=1.0.34"
+flate2 = "=1.0.35"
 minijinja = "=2.5.0"
 serde = { version = "=1.0.215", features = ["derive"] }
 serde_json = "=1.0.132"
diff --git a/crates/crates_io_tarball/Cargo.toml b/crates/crates_io_tarball/Cargo.toml
index d8fbb5c0fa7..8fd32909ed5 100644
--- a/crates/crates_io_tarball/Cargo.toml
+++ b/crates/crates_io_tarball/Cargo.toml
@@ -12,7 +12,7 @@ builder = []
 
 [dependencies]
 cargo-manifest = "=0.16.0"
-flate2 = "=1.0.34"
+flate2 = "=1.0.35"
 serde = { version = "=1.0.215", features = ["derive"] }
 serde_json = "=1.0.132"
 tar = "=0.4.43"