diff --git a/java/pom.xml b/java/pom.xml
index 0db16d2b375..29912e9a722 100644
--- a/java/pom.xml
+++ b/java/pom.xml
@@ -69,13 +69,13 @@
     <grpc.version>1.44.0</grpc.version>
     <!-- NOTE Netty handler and boring SSL must be kept compatible with grpc
       https://github.com/grpc/grpc-java/blob/master/SECURITY.md#netty -->
-    <netty.handler.version>4.1.72.Final</netty.handler.version>
+    <netty.handler.version>4.1.118.Final</netty.handler.version>
     <tcnative.boring.ssl.version>2.0.46.Final</tcnative.boring.ssl.version>
 
-    <protobuf.java.version>3.19.4</protobuf.java.version>
+    <protobuf.java.version>3.25.5</protobuf.java.version>
     <protobuf.protoc.version>3.19.4</protobuf.protoc.version>
     <checkstyle.plugin.version>3.0.0</checkstyle.plugin.version>
-    <log4j2.version>2.17.1</log4j2.version>
+    <log4j2.version>2.25.3</log4j2.version>
   </properties>
 
   <!-- Add new dependencies here and then add it below or in your module. -->
@@ -94,7 +94,7 @@
       <dependency>
         <groupId>com.google.guava</groupId>
         <artifactId>guava</artifactId>
-        <version>30.1.1-jre</version>
+        <version>32.0.0-jre</version>
       </dependency>
       <dependency>
         <groupId>com.google.protobuf</groupId>
@@ -109,7 +109,7 @@
       <dependency>
         <groupId>commons-io</groupId>
         <artifactId>commons-io</artifactId>
-        <version>2.7</version>
+        <version>2.14.0</version>
       </dependency>
 
       <dependency>