diff --git a/Cargo.lock b/Cargo.lock
index 4e945fc1f..63d41a0f2 100644
--- a/Cargo.lock
+++ b/Cargo.lock
@@ -8294,9 +8294,9 @@ dependencies = [
 
 [[package]]
 name = "zip"
-version = "3.0.0"
+version = "4.0.0"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "12598812502ed0105f607f941c386f43d441e00148fce9dec3ca5ffb0bde9308"
+checksum = "153a6fff49d264c4babdcfa6b4d534747f520e56e8f0f384f3b808c4b64cc1fd"
 dependencies = [
  "arbitrary",
  "crc32fast",
diff --git a/cli/Cargo.toml b/cli/Cargo.toml
index f9da4d12f..273d9bd2f 100644
--- a/cli/Cargo.toml
+++ b/cli/Cargo.toml
@@ -79,7 +79,7 @@ uuid = { version = "1.4.1", features = ["v4"] }
 vuln-reach = { git = "https://github.com/phylum-dev/vuln-reach", optional = true }
 vulnreach_types = { path = "../vulnreach_types", optional = true }
 walkdir = "2.3.2"
-zip = { version = "3.0.0", default-features = false, features = ["deflate"] }
+zip = { version = "4.0.0", default-features = false, features = ["deflate"] }
 
 [target.'cfg(unix)'.dependencies]
 birdcage = { version = "0.8.1" }