diff --git a/build.gradle.kts b/build.gradle.kts
index c6f56663..54d2d687 100644
--- a/build.gradle.kts
+++ b/build.gradle.kts
@@ -65,7 +65,7 @@ subprojects {
         "opentelemetry_gradle_plugin" to "1.33.0-alpha",
         "byte_buddy" to "1.12.10",
         "slf4j" to "2.0.7",
-        "jackson" to "2.18.11"
+        "jackson" to "2.18.12"
     ))
   }
 
diff --git a/otel-extensions/build.gradle.kts b/otel-extensions/build.gradle.kts
index 65681bc1..3cdc84d0 100644
--- a/otel-extensions/build.gradle.kts
+++ b/otel-extensions/build.gradle.kts
@@ -75,6 +75,7 @@ dependencies {
     // fix vulnerability
     constraints {
         api("com.google.code.gson:gson:2.8.9")
+        api("com.google.guava:guava:33.7.2-jre")
     }
 
     testImplementation("io.opentelemetry:opentelemetry-sdk-extension-autoconfigure:${versions["opentelemetry"]}")
diff --git a/shaded-protobuf-java-util/build.gradle.kts b/shaded-protobuf-java-util/build.gradle.kts
index 14a49a13..2044d190 100644
--- a/shaded-protobuf-java-util/build.gradle.kts
+++ b/shaded-protobuf-java-util/build.gradle.kts
@@ -9,6 +9,7 @@ dependencies {
     // fix vulnerability
     constraints {
         implementation("com.google.code.gson:gson:2.8.9")
+        implementation("com.google.guava:guava:33.7.2-jre")
     }
 }