diff --git a/Cargo.lock b/Cargo.lock
index 437cb737..471fd635 100644
--- a/Cargo.lock
+++ b/Cargo.lock
@@ -1773,9 +1773,9 @@ checksum = "a5996294f19bd3aae0453a862ad728f60e6600695733dd5df01da90c54363a3c"
 
 [[package]]
 name = "reqwest"
-version = "0.11.16"
+version = "0.11.17"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "27b71749df584b7f4cac2c426c127a7c785a5106cc98f7a8feb044115f0fa254"
+checksum = "13293b639a097af28fc8a90f22add145a9c954e49d77da06263d58cf44d5fb91"
 dependencies = [
  "async-compression",
  "base64 0.21.0",
diff --git a/crates/binstalk-downloader/Cargo.toml b/crates/binstalk-downloader/Cargo.toml
index 3741e7e1..26c68221 100644
--- a/crates/binstalk-downloader/Cargo.toml
+++ b/crates/binstalk-downloader/Cargo.toml
@@ -23,7 +23,7 @@ futures-lite = { version = "1.13.0", default-features = false }
 futures-util = "0.3.28"
 generic-array = "0.14.7"
 httpdate = "1.0.2"
-reqwest = { version = "0.11.16", features = ["stream", "gzip", "brotli", "deflate"], default-features = false }
+reqwest = { version = "0.11.17", features = ["stream", "gzip", "brotli", "deflate"], default-features = false }
 serde = { version = "1.0.160", features = ["derive"], optional = true }
 serde_json = { version = "1.0.96", optional = true }
 # Use a fork here since we need PAX support, but the upstream