diff --git a/a2a/pom.xml b/a2a/pom.xml
index e25c11f24..5b9703b9f 100644
--- a/a2a/pom.xml
+++ b/a2a/pom.xml
@@ -19,7 +19,7 @@
     <a2a.sdk.version>0.3.2.Final</a2a.sdk.version>
     <google.adk.version>${project.version}</google.adk.version>
     <guava.version>33.0.0-jre</guava.version>
-    <jackson.version>2.19.0</jackson.version>
+    <jackson.version>2.21.7</jackson.version>
     <jspecify.version>1.0.0</jspecify.version>
     <slf4j.version>2.0.17</slf4j.version>
     <truth.version>1.4.4</truth.version>
diff --git a/pom.xml b/pom.xml
index 4e35719dc..01578127a 100644
--- a/pom.xml
+++ b/pom.xml
@@ -81,7 +81,7 @@
     <assertj.version>3.27.7</assertj.version>
     <anthropic.version>2.15.0</anthropic.version>
     <maven-plugin-tools.version>3.9.0</maven-plugin-tools.version>
-    <httpclient5.version>5.6.1</httpclient5.version>
+    <httpclient5.version>5.6.3</httpclient5.version>
     <netty.version>4.1.118.Final</netty.version>
     <!-- Prepended to the surefire JVM args. Empty by default; any module whose tests resolve
          mockito-core (directly or transitively) must set it to