diff --git a/build.gradle b/build.gradle
index 7568b3a..b400148 100644
--- a/build.gradle
+++ b/build.gradle
@@ -81,6 +81,9 @@ subprojects {
             implementation("io.projectreactor.netty:reactor-netty-http:1.2.9") {
                 because("versions below 1.2.8 have security vulnerabilities including CVE-2025-22227 - see dependabot #16")
             }
+            implementation("io.netty:netty-codec-http2:4.1.124.Final") {
+                because("versions below 4.1.124.Final have security vulnerabilities including CVE-2025-55163 - see dependabot #17")
+            }
         }
     }