diff --git a/Cargo.lock b/Cargo.lock
index 3e5d1d12e..362de36b7 100644
--- a/Cargo.lock
+++ b/Cargo.lock
@@ -778,7 +778,7 @@ dependencies = [
  "pgp",
  "pretty_assertions",
  "prometheus",
- "protobuf",
+ "protobuf 3.7.2",
  "protoc-rust",
  "quay",
  "regex",
@@ -3246,7 +3246,7 @@ dependencies = [
  "lazy_static",
  "memchr",
  "parking_lot",
- "protobuf",
+ "protobuf 2.28.0",
  "thiserror 1.0.69",
 ]
 
@@ -3275,13 +3275,33 @@ version = "2.28.0"
 source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "106dd99e98437432fed6519dedecfade6a06a73bb7b2a1e019fdd2bee5778d94"
 
+[[package]]
+name = "protobuf"
+version = "3.7.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "d65a1d4ddae7d8b5de68153b48f6aa3bba8cb002b243dbdbc55a5afbc98f99f4"
+dependencies = [
+ "once_cell",
+ "protobuf-support",
+ "thiserror 1.0.69",
+]
+
 [[package]]
 name = "protobuf-codegen"
 version = "2.28.0"
 source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "033460afb75cf755fcfc16dfaed20b86468082a2ea24e05ac35ab4a099a017d6"
 dependencies = [
- "protobuf",
+ "protobuf 2.28.0",
+]
+
+[[package]]
+name = "protobuf-support"
+version = "3.7.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "3e36c2f31e0a47f9280fb347ef5e461ffcd2c52dd520d8e216b52f93b0b0d7d6"
+dependencies = [
+ "thiserror 1.0.69",
 ]
 
 [[package]]
@@ -3300,7 +3320,7 @@ version = "2.28.0"
 source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "22f8a182bb17c485f20bdc4274a8c39000a61024cfe461c799b50fec77267838"
 dependencies = [
- "protobuf",
+ "protobuf 2.28.0",
  "protobuf-codegen",
  "protoc",
  "tempfile",
diff --git a/cincinnati/Cargo.toml b/cincinnati/Cargo.toml
index 14f36d5fa..1f968bab8 100644
--- a/cincinnati/Cargo.toml
+++ b/cincinnati/Cargo.toml
@@ -14,7 +14,7 @@ futures = "0.3"
 lazy_static = "^1.5.0"
 log = "^0.4.20"
 prometheus = "0.13"
-protobuf = "2.20.0"
+protobuf = "3.7.2"
 quay = { path = "../quay" }
 regex = "^1.11.1"
 reqwest = { version = "^0.12", features = ["gzip", "rustls-tls-native-roots", "native-tls"] }