diff --git a/pom.xml b/pom.xml
index ec3e81826..c95d24e93 100644
--- a/pom.xml
+++ b/pom.xml
@@ -124,7 +124,7 @@
 
     <project.build.sourceEncoding>UTF-8</project.build.sourceEncoding>
     <httpclient.version>4.5.13</httpclient.version>
-    <jetty.version>9.4.41.v20210516</jetty.version>
+    <jetty.version>9.4.43.v20210629</jetty.version>
   </properties>
 
   <dependencyManagement>
@@ -160,7 +160,7 @@
       <dependency>
         <groupId>commons-codec</groupId>
         <artifactId>commons-codec</artifactId>
-        <version>1.10</version>
+        <version>1.13</version>
       </dependency>
       <dependency>
         <groupId>commons-io</groupId>
@@ -208,7 +208,7 @@
       <dependency>
         <groupId>ch.qos.logback</groupId>
         <artifactId>logback-classic</artifactId>
-        <version>1.2.3</version>
+        <version>1.2.9</version>
         <scope>test</scope>
       </dependency>
       <dependency>
@@ -315,6 +315,11 @@
         <artifactId>bcpkix-jdk15on</artifactId>
         <version>1.68</version>
       </dependency>
+      <dependency>
+        <groupId>javax.validation</groupId>
+        <artifactId>validation-api</artifactId>
+        <version>2.0.1.Final</version>
+      </dependency>
     </dependencies>
   </dependencyManagement>
 
diff --git a/weixin-java-common/pom.xml b/weixin-java-common/pom.xml
index d5d25cda3..bf7855083 100644
--- a/weixin-java-common/pom.xml
+++ b/weixin-java-common/pom.xml
@@ -50,7 +50,7 @@
     <dependency>
       <groupId>org.slf4j</groupId>
       <artifactId>jcl-over-slf4j</artifactId>
-      <version>1.7.30</version>
+      <version>1.7.36</version>
     </dependency>
 
     <dependency>
@@ -77,6 +77,10 @@
       <groupId>org.projectlombok</groupId>
       <artifactId>lombok</artifactId>
     </dependency>
+    <dependency>
+      <groupId>javax.validation</groupId>
+      <artifactId>validation-api</artifactId>
+    </dependency>
 
     <dependency>
       <groupId>ch.qos.logback</groupId>