diff --git a/datahub-api-model/build.gradle b/datahub-api-model/build.gradle
index 927df244..0a841331 100644
--- a/datahub-api-model/build.gradle
+++ b/datahub-api-model/build.gradle
@@ -57,8 +57,8 @@ dependencies {
 
     // ZstdPayloadCodec compiles against zstd-jni but the artifact does not carry it: the SDK, the
     // API and the consumer each put the native library on their own classpath.
-    compileOnly 'com.github.luben:zstd-jni:1.5.7-17'
-    testImplementation 'com.github.luben:zstd-jni:1.5.7-17'
+    compileOnly 'com.github.luben:zstd-jni:1.5.7-20'
+    testImplementation 'com.github.luben:zstd-jni:1.5.7-20'
 
     compileOnly 'org.projectlombok:lombok'
     annotationProcessor 'org.projectlombok:lombok'
diff --git a/datahub-api/build.gradle b/datahub-api/build.gradle
index 8bb5283b..4cda9f61 100644
--- a/datahub-api/build.gradle
+++ b/datahub-api/build.gradle
@@ -32,7 +32,7 @@ dependencies {
 	implementation 'net.openhft:zero-allocation-hashing:0.27ea0'
 	// Decompresses the binary datapoint frames to validate them (api-model's ZstdPayloadCodec is
 	// compile-only there; each consumer of it supplies the native library).
-	implementation 'com.github.luben:zstd-jni:1.5.7-17'
+	implementation 'com.github.luben:zstd-jni:1.5.7-20'
 	implementation("org.apache.pulsar:pulsar-client-admin:${pulsarVersion}"){
 		exclude group: 'org.apache.logging.log4j', module: 'log4j-slf4j-impl'
 	}
diff --git a/datahub-infra/build.gradle b/datahub-infra/build.gradle
index 284b9c19..be240389 100644
--- a/datahub-infra/build.gradle
+++ b/datahub-infra/build.gradle
@@ -91,7 +91,7 @@ dependencies {
     runtimeOnly 'org.flywaydb:flyway-database-postgresql:13.8.0'
 
     implementation 'at.yawk.lz4:lz4-java:1.12.0'
-    implementation 'com.github.luben:zstd-jni:1.5.7-17'
+    implementation 'com.github.luben:zstd-jni:1.5.7-20'
 
     compileOnly 'org.projectlombok:lombok'
     annotationProcessor 'org.projectlombok:lombok'
diff --git a/datahub-java-sdk/build.gradle b/datahub-java-sdk/build.gradle
index 7e515c41..5e4dbe48 100644
--- a/datahub-java-sdk/build.gradle
+++ b/datahub-java-sdk/build.gradle
@@ -27,7 +27,7 @@ dependencies {
 
     // zstd for the binary datapoint frames (compression is mandatory on that path and the JDK
     // has no zstd). api-model's ZstdPayloadCodec compiles against it but does not carry it.
-    implementation 'com.github.luben:zstd-jni:1.5.7-17'
+    implementation 'com.github.luben:zstd-jni:1.5.7-20'
 
     // The SDK's own warnings (spooled data dropped or unreadable) go to the caller's logging
     // backend. api-model already brings slf4j-api; declared here because the SDK uses it directly.
diff --git a/datahub-stateless-consumer/build.gradle b/datahub-stateless-consumer/build.gradle
index 1e9f7498..42089223 100644
--- a/datahub-stateless-consumer/build.gradle
+++ b/datahub-stateless-consumer/build.gradle
@@ -56,7 +56,7 @@ dependencies {
 	implementation 'net.openhft:zero-allocation-hashing:0.27ea0'
 
 	implementation 'at.yawk.lz4:lz4-java:1.12.0'
-	implementation 'com.github.luben:zstd-jni:1.5.7-17'
+	implementation 'com.github.luben:zstd-jni:1.5.7-20'
 
 	implementation 'org.springframework.boot:spring-boot-starter-data-jpa'
 	// Tomcat, for the Prometheus scrape endpoint only (/actuator/prometheus); nothing else listens.