diff --git a/Cargo.lock b/Cargo.lock
index 25e9b16..593a677 100644
--- a/Cargo.lock
+++ b/Cargo.lock
@@ -342,9 +342,9 @@ dependencies = [
 
 [[package]]
 name = "crc32fast"
-version = "1.5.3"
+version = "1.5.4"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "0ba106e844045ddc02c20768ac4b0b7cb45f2cc2ecbd833ac9f5dacb183c2055"
+checksum = "5f97d3416d5337d15c4b0d78c8c91df922ca143f57ec20e2d1c188333047ef04"
 dependencies = [
  "cfg-if",
 ]
diff --git a/Cargo.toml b/Cargo.toml
index d6b7746..611923c 100644
--- a/Cargo.toml
+++ b/Cargo.toml
@@ -12,7 +12,7 @@ repository = "https://github.com/elide-dev/bemo"
 # Upstream PR #555 fixes stable state teardown UB; direct pin travels to Cargo consumers.
 zlib-rs = { version = "=0.6.7", git = "https://github.com/jlucaso1/zlib-rs.git", rev = "cedb23f2a9329d0bc81d0c8068d74d2b16a24dd6", default-features = false, features = ["std"] }
 flate2 = { version = "=1.1.10", default-features = false, features = ["rust_backend"] }
-crc32fast = "=1.5.3"
+crc32fast = "=1.5.4"
 bemo = { path = "crates/bemo", version = "0.5.0", default-features = false }
 
 compio-buf = { version = "=0.8.3", git = "https://github.com/elide-tools/compio.git", rev = "029af1602c7701dd4fc607c9c857a26144153b14" }