diff --git a/pom.xml b/pom.xml
index 09ee2634df1..95b653b2f53 100644
--- a/pom.xml
+++ b/pom.xml
@@ -220,6 +220,25 @@
 				<artifactId>xstream</artifactId>
 				<version>1.4.21</version>
 			</dependency>
+			<!-- to fix CVE-2025-24970 -->
+			<dependency>
+				<groupId>io.netty</groupId>
+				<artifactId>netty-bom</artifactId>
+				<version>4.1.113.Final</version>
+				<type>pom</type>
+				<scope>import</scope>
+			</dependency>
+			<dependency>
+				<groupId>io.netty</groupId>
+				<artifactId>netty-handler</artifactId>
+				<version>4.1.113.Final</version>
+			</dependency>
+			<!-- to fix CVE-2023-44981 -->
+			<dependency>
+				<groupId>org.apache.zookeeper</groupId>
+				<artifactId>zookeeper</artifactId>
+				<version>3.8.4</version>
+			</dependency>
 			<!--for test -->
 			<dependency>
 				<groupId>org.awaitility</groupId>