diff --git a/h2o-assemblies/main/build.gradle b/h2o-assemblies/main/build.gradle
index b0579aa4b1b0..3feef08d35df 100644
--- a/h2o-assemblies/main/build.gradle
+++ b/h2o-assemblies/main/build.gradle
@@ -54,6 +54,13 @@ dependencies {
         api('net.minidev:json-smart:2.4.10') {
             because 'Fixes CVE-2023-1370'
         }
+        api('org.codehaus.jettison:jettison:1.5.4') {
+            because 'Fixes CVE-2023-1436'
+            because 'Fixes CVE-2022-45693'
+            because 'Fixes CVE-2022-45685'
+            because 'Fixes CVE-2022-40150'
+            because 'Fixes CVE-2022-40149'
+        }
         api('com.google.guava:guava:32.0.1-jre') {
             because 'Fixes CVE-2023-2976'
             because 'Fixes CVE-2020-8908'
diff --git a/h2o-assemblies/steam/build.gradle b/h2o-assemblies/steam/build.gradle
index 210cb0d94e6c..0aba49fd3ccd 100644
--- a/h2o-assemblies/steam/build.gradle
+++ b/h2o-assemblies/steam/build.gradle
@@ -63,6 +63,7 @@ dependencies {
             because 'Fixes CVE-2022-45693'
             because 'Fixes CVE-2022-45685'
             because 'Fixes CVE-2022-40150'
+            because 'Fixes CVE-2022-40149'
         }
         api('org.jetbrains.kotlin:kotlin-stdlib:1.4.32') {
             because 'Fixes CVE-2020-29582'