diff --git a/eureka-client/build.gradle b/eureka-client/build.gradle
index 958d0e5b61..00fe81878a 100644
--- a/eureka-client/build.gradle
+++ b/eureka-client/build.gradle
@@ -7,7 +7,7 @@ configurations.all {
 
 dependencies {
     api "com.netflix.netflix-commons:netflix-eventbus:0.3.0"
-    api 'com.thoughtworks.xstream:xstream:1.4.18'
+    api 'com.thoughtworks.xstream:xstream:1.4.19'
     api "com.netflix.archaius:archaius-core:${archaiusVersion}"
     api 'jakarta.ws.rs:jakarta.ws.rs-api:3.0.0'
     api 'jakarta.inject:jakarta.inject-api:2.0.1'
diff --git a/eureka-core/build.gradle b/eureka-core/build.gradle
index 5445244009..a3f815a649 100644
--- a/eureka-core/build.gradle
+++ b/eureka-core/build.gradle
@@ -10,7 +10,7 @@ dependencies {
     api "com.amazonaws:aws-java-sdk-route53:${awsVersion}"
     api "jakarta.servlet:jakarta.servlet-api:${servletVersion}"
     api 'jakarta.inject:jakarta.inject-api:2.0.1'
-    api 'com.thoughtworks.xstream:xstream:1.4.17'
+    api 'com.thoughtworks.xstream:xstream:1.4.19'
 
     // These dependencies are marked 'compileOnly' in the client, but we need them always on the server
     api "com.fasterxml.jackson.dataformat:jackson-dataformat-xml:${jacksonVersion}"