diff --git a/Cargo.lock b/Cargo.lock
index fe4ec94..7c8ce68 100644
--- a/Cargo.lock
+++ b/Cargo.lock
@@ -851,9 +851,9 @@ checksum = "589f6da84c646204747d1270a2a5661ea66ed1cced2631d546fdfb155959f9ec"
 
 [[package]]
 name = "zip"
-version = "2.2.0"
+version = "2.1.3"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "dc5e4288ea4057ae23afc69a4472434a87a2495cafce6632fd1c4ec9f5cf3494"
+checksum = "775a2b471036342aa69bc5a602bc889cb0a06cda00477d0c69566757d5553d39"
 dependencies = [
  "arbitrary",
  "crc32fast",
diff --git a/Cargo.toml b/Cargo.toml
index c5fc5c3..8b342be 100644
--- a/Cargo.toml
+++ b/Cargo.toml
@@ -18,7 +18,10 @@ boxcars = "0.9.17"
 glob = "0.3"
 either = "1"
 memmap2 = "0.9.5"
-zip = { version = "2", default-features = false, features = ["deflate-zlib-ng"] }
+
+# Pin zip to avoid performance regressions
+# https://github.com/zip-rs/zip2/pull/247#issuecomment-2541464228
+zip = { version = "=2.1.3", default-features = false, features = ["deflate-zlib-ng"] }
 
 [dev-dependencies]
 assert_cmd = "2"