diff --git a/Cargo.lock b/Cargo.lock
index e1e445cc3c4..41a2419ac21 100644
--- a/Cargo.lock
+++ b/Cargo.lock
@@ -177,6 +177,15 @@ dependencies = [
  "num-traits",
 ]
 
+[[package]]
+name = "arbitrary"
+version = "1.3.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "7d5a26814d8dcb93b0e5a0ff3c6d80a8843bafb21b39e8e18a6f05471870e110"
+dependencies = [
+ "derive_arbitrary",
+]
+
 [[package]]
 name = "arc-swap"
 version = "1.6.0"
@@ -1263,9 +1272,9 @@ checksum = "9cace84e55f07e7301bae1c519df89cdad8cc3cd868413d3fdbdeca9ff3db484"
 
 [[package]]
 name = "crc32fast"
-version = "1.3.2"
+version = "1.4.0"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "b540bd8bc810d3885c6ea91e2018302f68baba2129ab3e88f32389ee9370880d"
+checksum = "b3855a8a784b474f333699ef2bbca9db2c4a1f6d9088a90a2d25b1eb53111eaa"
 dependencies = [
  "cfg-if",
 ]
@@ -1704,6 +1713,17 @@ dependencies = [
  "syn 2.0.60",
 ]
 
+[[package]]
+name = "derive_arbitrary"
+version = "1.3.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "67e77553c4162a157adbf834ebae5b415acbecbeafc7a74b0e886657506a7611"
+dependencies = [
+ "proc-macro2",
+ "quote",
+ "syn 2.0.60",
+]
+
 [[package]]
 name = "derive_builder"
 version = "0.20.0"
@@ -1904,6 +1924,17 @@ version = "0.2.0"
 source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "f77af9e75578c1ab34f5f04545a8b05be0c36fbd7a9bb3cf2d2a971e435fdbb9"
 
+[[package]]
+name = "displaydoc"
+version = "0.2.4"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "487585f4d0c6655fe74905e2504d8ad6908e4db67f744eb140876906c2f3175d"
+dependencies = [
+ "proc-macro2",
+ "quote",
+ "syn 2.0.60",
+]
+
 [[package]]
 name = "dladm"
 version = "0.0.0"
@@ -2754,7 +2785,7 @@ dependencies = [
  "usdt 0.3.5",
  "uuid",
  "version_check",
- "zip",
+ "zip 0.6.6",
 ]
 
 [[package]]
@@ -3281,7 +3312,7 @@ dependencies = [
  "toml 0.7.8",
  "x509-cert",
  "zerocopy 0.6.6",
- "zip",
+ "zip 0.6.6",
 ]
 
 [[package]]
@@ -5859,7 +5890,7 @@ dependencies = [
  "yasna",
  "zerocopy 0.7.32",
  "zeroize",
- "zip",
+ "zip 0.6.6",
 ]
 
 [[package]]
@@ -10176,7 +10207,7 @@ dependencies = [
  "toml 0.8.12",
  "tough",
  "url",
- "zip",
+ "zip 1.2.3",
 ]
 
 [[package]]
@@ -11438,6 +11469,22 @@ dependencies = [
  "flate2",
 ]
 
+[[package]]
+name = "zip"
+version = "1.2.3"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "c700ea425e148de30c29c580c1f9508b93ca57ad31c9f4e96b83c194c37a7a8f"
+dependencies = [
+ "arbitrary",
+ "bzip2",
+ "crc32fast",
+ "crossbeam-utils",
+ "displaydoc",
+ "flate2",
+ "indexmap 2.2.6",
+ "thiserror",
+]
+
 [[package]]
 name = "zone"
 version = "0.1.8"
diff --git a/Cargo.toml b/Cargo.toml
index 83a41ff8343..ed36dd107c8 100644
--- a/Cargo.toml
+++ b/Cargo.toml
@@ -490,7 +490,7 @@ wicket = { path = "wicket" }
 wicket-common = { path = "wicket-common" }
 wicketd-client = { path = "clients/wicketd-client" }
 zeroize = { version = "1.7.0", features = ["zeroize_derive", "std"] }
-zip = { version = "0.6.6", default-features = false, features = ["deflate","bzip2"] }
+zip = { version = "1.2.3", default-features = false, features = ["deflate","bzip2"] }
 zone = { version = "0.3", default-features = false, features = ["async"] }
 
 # newtype-uuid is set to default-features = false because we don't want to