diff --git a/assemblies/features/enterprise/src/main/feature/feature.xml b/assemblies/features/enterprise/src/main/feature/feature.xml
index a37523c7367..f573bdec015 100644
--- a/assemblies/features/enterprise/src/main/feature/feature.xml
+++ b/assemblies/features/enterprise/src/main/feature/feature.xml
@@ -169,7 +169,7 @@ com.atomikos.icatch.log_base_dir=${karaf.data}/atomikos
         <bundle>mvn:org.jboss.logging/jboss-logging/3.5.0.Final</bundle>
         <bundle>mvn:org.antlr/antlr4-runtime/4.13.0</bundle>
         <bundle>mvn:jakarta.persistence/jakarta.persistence-api/3.2.0</bundle>
-        <bundle>mvn:net.bytebuddy/byte-buddy/1.18.0</bundle>
+        <bundle>mvn:net.bytebuddy/byte-buddy/1.18.11</bundle>
         <bundle>mvn:jakarta.transaction/jakarta.transaction-api/2.0.1</bundle>
         <bundle>mvn:io.smallrye/jandex/3.2.0</bundle>
         <bundle>mvn:com.fasterxml/classmate/1.5.1</bundle>
diff --git a/examples/karaf-rest-example/karaf-rest-example-features/src/main/feature/feature.xml b/examples/karaf-rest-example/karaf-rest-example-features/src/main/feature/feature.xml
index ee0b85e33ce..c8a647c8141 100644
--- a/examples/karaf-rest-example/karaf-rest-example-features/src/main/feature/feature.xml
+++ b/examples/karaf-rest-example/karaf-rest-example-features/src/main/feature/feature.xml
@@ -76,7 +76,7 @@
     </feature>
 
     <feature name="hk2" description="HK2 support" version="2.6.1">
-        <bundle dependency="true">mvn:org.javassist/javassist/3.25.0-GA</bundle>
+        <bundle dependency="true">mvn:org.javassist/javassist/3.32.0-GA</bundle>
         <bundle>mvn:org.glassfish.hk2.external/jakarta.inject/2.6.1</bundle>
         <bundle>mvn:org.glassfish.hk2/osgi-resource-locator/1.0.3</bundle>
         <bundle>mvn:org.glassfish.hk2/hk2-locator/2.6.1</bundle>
diff --git a/pom.xml b/pom.xml
index de0e2014f8c..0ec0dd8a78b 100644
--- a/pom.xml
+++ b/pom.xml
@@ -178,7 +178,7 @@
         <jna.version>5.19.1</jna.version>
         <jaxb-bom.version>4.0.9</jaxb-bom.version>
         <commons-beanutils.version>1.9.4</commons-beanutils.version>
-        <commons-codec.version>1.15</commons-codec.version>
+        <commons-codec.version>1.22.1</commons-codec.version>
         <commons-compress.version>1.28.0</commons-compress.version>
         <commons-fileupload.version>1.6.0</commons-fileupload.version>
         <commons-lang3.version>3.20.0</commons-lang3.version>
@@ -282,7 +282,7 @@
         <hibernate.validator.version>8.0.5.Final</hibernate.validator.version>
         <httpclient.version>4.5.14</httpclient.version>
         <jansi.version>2.4.3</jansi.version>
-        <javassist.version>3.9.0.GA</javassist.version>
+        <javassist.version>3.32.0-GA</javassist.version>
         <jline.version>4.3.1</jline.version>
         <junit.version>4.13.2</junit.version>
         <jsw.version>3.2.3</jsw.version>
@@ -325,12 +325,12 @@
 
 
         <pax.exam.version>4.14.0</pax.exam.version>
-        <pax.logging.version>2.3.4</pax.logging.version>
+        <pax.logging.version>2.3.5</pax.logging.version>
         <pax.base.version>1.5.1</pax.base.version>
         <pax.swissbox.version>1.9.0</pax.swissbox.version>
         <pax.url.version>3.0.3</pax.url.version>
-        <pax.web.version>11.1.1</pax.web.version>
-        <jetty.version>12.1.11</jetty.version>
+        <pax.web.version>11.1.3</pax.web.version>
+        <jetty.version>12.1.12</jetty.version>
         <pax.tinybundle.version>4.0.1</pax.tinybundle.version>
         <pax.jdbc.version>1.5.7</pax.jdbc.version>
         <pax.jms.version>1.1.3</pax.jms.version>