diff --git a/dumper/app/build.gradle b/dumper/app/build.gradle
index da3607c70..db86036fa 100644
--- a/dumper/app/build.gradle
+++ b/dumper/app/build.gradle
@@ -70,6 +70,7 @@ dependencies {
     }
     implementation libs.commons.beanutils // explicit version for vulnerabilities update
     implementation libs.jetty.server // explicit version for vulnerabilities update
+    implementation libs.netty.handler // explicit version for vulnerabilities update
     implementation libs.hadoop.hdfs.client
     implementation(libs.harawata.appdirs) {
         exclude group: "net.java.dev.jna", module: "jna"
diff --git a/dumper/app/gradle.lockfile b/dumper/app/gradle.lockfile
index e6e905990..065184090 100644
--- a/dumper/app/gradle.lockfile
+++ b/dumper/app/gradle.lockfile
@@ -128,15 +128,15 @@ io.grpc:grpc-services:1.69.0=runtimeClasspath,testFixturesRuntimeClasspath,testR
 io.grpc:grpc-stub:1.71.0=compileClasspath,runtimeClasspath,testCompileClasspath,testFixturesRuntimeClasspath,testRuntimeClasspath
 io.grpc:grpc-util:1.71.0=compileClasspath,runtimeClasspath,testCompileClasspath,testFixturesRuntimeClasspath,testRuntimeClasspath
 io.grpc:grpc-xds:1.69.0=runtimeClasspath,testFixturesRuntimeClasspath,testRuntimeClasspath
-io.netty:netty-buffer:4.1.110.Final=compileClasspath,runtimeClasspath,testCompileClasspath,testFixturesRuntimeClasspath,testRuntimeClasspath
-io.netty:netty-codec:4.1.100.Final=compileClasspath,runtimeClasspath,testCompileClasspath,testFixturesRuntimeClasspath,testRuntimeClasspath
-io.netty:netty-common:4.1.110.Final=compileClasspath,runtimeClasspath,testCompileClasspath,testFixturesRuntimeClasspath,testRuntimeClasspath
-io.netty:netty-handler:4.1.100.Final=compileClasspath,runtimeClasspath,testCompileClasspath,testFixturesRuntimeClasspath,testRuntimeClasspath
-io.netty:netty-resolver:4.1.100.Final=compileClasspath,runtimeClasspath,testCompileClasspath,testFixturesRuntimeClasspath,testRuntimeClasspath
-io.netty:netty-transport-classes-epoll:4.1.100.Final=compileClasspath,runtimeClasspath,testCompileClasspath,testFixturesRuntimeClasspath,testRuntimeClasspath
-io.netty:netty-transport-native-epoll:4.1.100.Final=compileClasspath,runtimeClasspath,testCompileClasspath,testFixturesRuntimeClasspath,testRuntimeClasspath
-io.netty:netty-transport-native-unix-common:4.1.100.Final=compileClasspath,runtimeClasspath,testCompileClasspath,testFixturesRuntimeClasspath,testRuntimeClasspath
-io.netty:netty-transport:4.1.100.Final=compileClasspath,runtimeClasspath,testCompileClasspath,testFixturesRuntimeClasspath,testRuntimeClasspath
+io.netty:netty-buffer:4.1.127.Final=compileClasspath,runtimeClasspath,testCompileClasspath,testFixturesRuntimeClasspath,testRuntimeClasspath
+io.netty:netty-codec:4.1.127.Final=compileClasspath,runtimeClasspath,testCompileClasspath,testFixturesRuntimeClasspath,testRuntimeClasspath
+io.netty:netty-common:4.1.127.Final=compileClasspath,runtimeClasspath,testCompileClasspath,testFixturesRuntimeClasspath,testRuntimeClasspath
+io.netty:netty-handler:4.1.127.Final=compileClasspath,runtimeClasspath,testCompileClasspath,testFixturesRuntimeClasspath,testRuntimeClasspath
+io.netty:netty-resolver:4.1.127.Final=compileClasspath,runtimeClasspath,testCompileClasspath,testFixturesRuntimeClasspath,testRuntimeClasspath
+io.netty:netty-transport-classes-epoll:4.1.127.Final=compileClasspath,runtimeClasspath,testCompileClasspath,testFixturesRuntimeClasspath,testRuntimeClasspath
+io.netty:netty-transport-native-epoll:4.1.127.Final=compileClasspath,runtimeClasspath,testCompileClasspath,testFixturesRuntimeClasspath,testRuntimeClasspath
+io.netty:netty-transport-native-unix-common:4.1.127.Final=compileClasspath,runtimeClasspath,testCompileClasspath,testFixturesRuntimeClasspath,testRuntimeClasspath
+io.netty:netty-transport:4.1.127.Final=compileClasspath,runtimeClasspath,testCompileClasspath,testFixturesRuntimeClasspath,testRuntimeClasspath
 io.opencensus:opencensus-api:0.31.1=compileClasspath,runtimeClasspath,testCompileClasspath,testFixturesRuntimeClasspath,testRuntimeClasspath
 io.opencensus:opencensus-contrib-http-util:0.31.1=compileClasspath,runtimeClasspath,testCompileClasspath,testFixturesRuntimeClasspath,testRuntimeClasspath
 io.opentelemetry.contrib:opentelemetry-gcp-resources:1.37.0-alpha=compileClasspath,runtimeClasspath,testCompileClasspath,testFixturesRuntimeClasspath,testRuntimeClasspath
diff --git a/dumper/lib-ext-hive-metastore/build.gradle b/dumper/lib-ext-hive-metastore/build.gradle
index 70ce1fd83..0ed09023e 100644
--- a/dumper/lib-ext-hive-metastore/build.gradle
+++ b/dumper/lib-ext-hive-metastore/build.gradle
@@ -57,6 +57,7 @@ dependencies {
     hive312RuntimeOnly libs.logback.classic
     hive312RuntimeOnly libs.jcl.over.slf4j
     hive312RuntimeOnly libs.commons.beanutils // explicit version for vulnerabilities update
+    hive312RuntimeOnly libs.netty.handler // explicit version for vulnerabilities update
 
     // For HiveServer2
     hive312RuntimeOnly libs.tez.common
diff --git a/dumper/lib-ext-hive-metastore/gradle.lockfile b/dumper/lib-ext-hive-metastore/gradle.lockfile
index 13c5306ef..ca776434f 100644
--- a/dumper/lib-ext-hive-metastore/gradle.lockfile
+++ b/dumper/lib-ext-hive-metastore/gradle.lockfile
@@ -79,15 +79,15 @@ io.dropwizard.metrics:metrics-core:3.2.4=hive312RuntimeClasspath
 io.dropwizard.metrics:metrics-json:3.1.0=hive312RuntimeClasspath
 io.dropwizard.metrics:metrics-jvm:3.1.0=hive312RuntimeClasspath
 io.netty:netty-all:4.1.17.Final=hive312RuntimeClasspath
-io.netty:netty-buffer:4.1.100.Final=hive312RuntimeClasspath
-io.netty:netty-codec:4.1.100.Final=hive312RuntimeClasspath
-io.netty:netty-common:4.1.100.Final=hive312RuntimeClasspath
-io.netty:netty-handler:4.1.100.Final=hive312RuntimeClasspath
-io.netty:netty-resolver:4.1.100.Final=hive312RuntimeClasspath
-io.netty:netty-transport-classes-epoll:4.1.100.Final=hive312RuntimeClasspath
-io.netty:netty-transport-native-epoll:4.1.100.Final=hive312RuntimeClasspath
-io.netty:netty-transport-native-unix-common:4.1.100.Final=hive312RuntimeClasspath
-io.netty:netty-transport:4.1.100.Final=hive312RuntimeClasspath
+io.netty:netty-buffer:4.1.127.Final=hive312RuntimeClasspath
+io.netty:netty-codec:4.1.127.Final=hive312RuntimeClasspath
+io.netty:netty-common:4.1.127.Final=hive312RuntimeClasspath
+io.netty:netty-handler:4.1.127.Final=hive312RuntimeClasspath
+io.netty:netty-resolver:4.1.127.Final=hive312RuntimeClasspath
+io.netty:netty-transport-classes-epoll:4.1.127.Final=hive312RuntimeClasspath
+io.netty:netty-transport-native-epoll:4.1.127.Final=hive312RuntimeClasspath
+io.netty:netty-transport-native-unix-common:4.1.127.Final=hive312RuntimeClasspath
+io.netty:netty-transport:4.1.127.Final=hive312RuntimeClasspath
 io.netty:netty:3.10.5.Final=hive312RuntimeClasspath
 jakarta.activation:jakarta.activation-api:1.2.2=hive312RuntimeClasspath
 jakarta.annotation:jakarta.annotation-api:2.1.1=runtimeClasspath,testFixturesRuntimeClasspath,testRuntimeClasspath
diff --git a/gradle/libs.versions.toml b/gradle/libs.versions.toml
index 29f879f1f..774a6544b 100644
--- a/gradle/libs.versions.toml
+++ b/gradle/libs.versions.toml
@@ -73,6 +73,7 @@ cloudrun = "0.60.0"
 jna = "5.17.0"
 commons-beanutils = "1.11.0"
 jetty-server = "9.4.58.v20250814"
+netty-handler = "4.1.127.Final"
 
 [libraries]
 apache-avro = { module = "org.apache.avro:avro", version.ref = "apache-avro" }
@@ -106,6 +107,7 @@ hadoop-auth = { module = "org.apache.hadoop:hadoop-auth", version.ref = "hadoop"
 hadoop-common = { module = "org.apache.hadoop:hadoop-common", version.ref = "hadoop" }
 commons-beanutils = { module = "commons-beanutils:commons-beanutils", version.ref = "commons-beanutils" }
 jetty-server = { module = "org.eclipse.jetty:jetty-server", version.ref = "jetty-server" }
+netty-handler = { module = "io.netty:netty-handler", version.ref = "netty-handler" }
 hadoop-hdfs-client = { module = "org.apache.hadoop:hadoop-hdfs-client", version.ref = "hadoop" }
 harawata-appdirs = {module = "net.harawata:appdirs", version = "1.3.0"}
 hikaricp = { module = "com.zaxxer:HikariCP", version.ref = "hikaricp" }