diff --git a/Cargo.lock b/Cargo.lock
index 9505d28ca..77cf73e26 100644
--- a/Cargo.lock
+++ b/Cargo.lock
@@ -8342,9 +8342,9 @@ dependencies = [
 
 [[package]]
 name = "zip"
-version = "4.6.1"
+version = "5.0.0"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "caa8cd6af31c3b31c6631b8f483848b91589021b28fffe50adada48d4f4d2ed1"
+checksum = "b9fdfa5f34b5980f2c21b3a2c68c09ade4debddc7be52c51056695effc73a08c"
 dependencies = [
  "arbitrary",
  "crc32fast",
diff --git a/cli/Cargo.toml b/cli/Cargo.toml
index 281d7f00e..b0fd3fc48 100644
--- a/cli/Cargo.toml
+++ b/cli/Cargo.toml
@@ -80,7 +80,7 @@ uuid = { version = "1.4.1", features = ["v4"] }
 vuln-reach = { git = "https://github.com/phylum-dev/vuln-reach", optional = true }
 vulnreach_types = { path = "../vulnreach_types", optional = true }
 walkdir = "2.3.2"
-zip = { version = "4.0.0", default-features = false, features = ["deflate"] }
+zip = { version = "5.0.0", default-features = false, features = ["deflate"] }
 
 [target.'cfg(unix)'.dependencies]
 birdcage = { version = "0.8.1" }