diff --git a/h2o-assemblies/main/build.gradle b/h2o-assemblies/main/build.gradle
index 8089d4613b3a..6231736b5867 100644
--- a/h2o-assemblies/main/build.gradle
+++ b/h2o-assemblies/main/build.gradle
@@ -83,6 +83,9 @@ dependencies {
             because 'Fixes CVE-2023-34453'
             because 'Fixes CVE-2023-43642'
         }
+        api('org.apache.commons:commons-configuration2:2.10.1') {
+            because 'Fixes CVE-2024-29131'
+        }
     }
 }
 
diff --git a/h2o-assemblies/steam/build.gradle b/h2o-assemblies/steam/build.gradle
index b6f28ab41b5c..2f177ecd991b 100644
--- a/h2o-assemblies/steam/build.gradle
+++ b/h2o-assemblies/steam/build.gradle
@@ -81,6 +81,9 @@ dependencies {
             because 'Fixes CVE-2023-34453'
             because 'Fixes CVE-2023-43642'
         }
+        api('org.apache.commons:commons-configuration2:2.10.1') {
+            because 'Fixes CVE-2024-29131'
+        }
     }
 }