diff --git a/pom.xml b/pom.xml
index b8e316abe..0242636da 100644
--- a/pom.xml
+++ b/pom.xml
@@ -52,9 +52,9 @@
     </scm>
 
     <properties>
-        <apacheds-jdbm1.version>2.0.0-M2</apacheds-jdbm1.version>
-        <confluent-log4j.version>1.2.17-cp8</confluent-log4j.version>
-        <kafka.connect.maven.plugin.version>0.11.1</kafka.connect.maven.plugin.version>
+        <apacheds-jdbm1.version>2.0.0-M3</apacheds-jdbm1.version>
+        <confluent-log4j.version>1.2.17-cp12</confluent-log4j.version>
+        <kafka.connect.maven.plugin.version>0.12.0</kafka.connect.maven.plugin.version>
         <instruction.coverage.threshold>0.65</instruction.coverage.threshold>
         <branch.coverage.threshold>0.59</branch.coverage.threshold>
         <method.coverage.threshold>0.63</method.coverage.threshold>
@@ -64,15 +64,15 @@
         <maven.release.plugin.version>2.5.3</maven.release.plugin.version>
         <kafka.connect.storage.common.version>11.2.20</kafka.connect.storage.common.version>
         <commons.collections.version>3.2.2</commons.collections.version>
-        <commons-net.version>3.9.0</commons-net.version>
-        <ivy.version>2.5.2</ivy.version>
-        <json-smart.version>2.4.10</json-smart.version>
-        <libthrift.version>0.14.0</libthrift.version>
-        <log4j2-api.version>2.17.1</log4j2-api.version>
+        <commons-net.version>3.11.1</commons-net.version>
+        <ivy.version>2.5.3</ivy.version>
+        <json-smart.version>2.5.1</json-smart.version>
+        <libthrift.version>0.21.0</libthrift.version>
+        <log4j2-api.version>2.24.3</log4j2-api.version>
         <jettison.version>1.5.4</jettison.version>
-        <snakeyaml.version>2.0</snakeyaml.version>
-        <snappy.java.version>1.1.10.4</snappy.java.version>
-        <woodstox-core.version>6.5.0</woodstox-core.version>
+        <snakeyaml.version>2.3</snakeyaml.version>
+        <snappy.java.version>1.1.10.7</snappy.java.version>
+        <woodstox-core.version>6.7.0</woodstox-core.version>
     </properties>
 
     <repositories>
@@ -117,7 +117,7 @@
             <dependency>
                 <groupId>org.apache.mina</groupId>
                 <artifactId>mina-core</artifactId>
-                <version>2.0.27</version>
+                <version>2.2.4</version>
             </dependency>
             <dependency>
                 <groupId>com.jamesmurty.utils</groupId>
@@ -133,13 +133,13 @@
             <dependency>
                 <groupId>org.apache.velocity</groupId>
                 <artifactId>velocity-engine-core</artifactId>
-                <version>2.4</version>
+                <version>2.4.1</version>
             </dependency>
             <!-- Pin commons-io to resolve CVE-2024-47554   -->
             <dependency>
                 <groupId>commons-io</groupId>
                 <artifactId>commons-io</artifactId>
-                <version>2.14.0</version>
+                <version>2.18.0</version>
             </dependency>
             <!-- Pin xercesImpl to resolve CVE-2022-2343   -->
             <dependency>
@@ -168,19 +168,19 @@
             <dependency>
                 <groupId>com.nimbusds</groupId>
                 <artifactId>nimbus-jose-jwt</artifactId>
-                <version>9.37.2</version>
+                <version>9.48</version>
             </dependency>
             <!-- pin dependency to fix cve-->
             <dependency>
                 <groupId>com.squareup.okio</groupId>
                 <artifactId>okio</artifactId>
-                <version>3.4.0</version>
+                <version>3.10.2</version>
             </dependency>
             <!-- pin hbase and exclude commons-httpclient to fix cve -->
             <dependency>
                 <groupId>org.apache.hbase</groupId>
                 <artifactId>hbase-server</artifactId>
-                <version>1.1.1</version>
+                <version>1.7.2</version>
                 <exclusions>
                     <exclusion>
                         <groupId>commons-httpclient</groupId>
@@ -197,7 +197,7 @@
             <dependency>
                 <groupId>org.apache.calcite.avatica</groupId>
                 <artifactId>avatica-core</artifactId>
-                <version>1.22.0</version>
+                <version>1.25.0</version>
             </dependency>
             <!-- pin tomcat-embed to fix cve -->
             <dependency>
@@ -306,7 +306,7 @@
         <dependency>
             <groupId>org.apache.calcite</groupId>
             <artifactId>calcite-druid</artifactId>
-            <version>1.26.0</version>
+            <version>1.38.0</version>
         </dependency>
         <dependency>
             <groupId>commons-collections</groupId>
@@ -344,7 +344,7 @@
         <dependency>
             <groupId>com.lmax</groupId>
             <artifactId>disruptor</artifactId>
-            <version>3.4.2</version>
+            <version>3.4.4</version>
         </dependency>
         <dependency>
             <groupId>com.github.spotbugs</groupId>
@@ -562,7 +562,7 @@
             </plugin>
             <plugin>
                 <artifactId>maven-clean-plugin</artifactId>
-                <version>3.0.0</version>
+                <version>3.4.0</version>
                 <configuration>
                     <filesets>
                         <fileset>
@@ -578,7 +578,7 @@
             <plugin>
                 <groupId>org.jacoco</groupId>
                 <artifactId>jacoco-maven-plugin</artifactId>
-                <version>0.8.11</version>
+                <version>0.8.12</version>
                 <configuration>
                     <excludes>
                         <exclude>**/model/**</exclude>