diff --git a/pom.xml b/pom.xml
index fc49750d29..88cf0be8b3 100644
--- a/pom.xml
+++ b/pom.xml
@@ -152,7 +152,7 @@
     <jackson-bom.version>2.13.4.20221013</jackson-bom.version>
     <jsonpath.version>2.9.0</jsonpath.version>
     <jettison.version>1.5.4</jettison.version>
-    <xstream.core.version>1.4.20</xstream.core.version>
+    <xstream.core.version>1.4.21</xstream.core.version>
     <woodstox.version>6.4.0</woodstox.version>
     <snakeyaml.version>1.33</snakeyaml.version>
 
diff --git a/tool/dependencies/known-dependencies.txt b/tool/dependencies/known-dependencies.txt
index de1652e8ca..6654575af3 100644
--- a/tool/dependencies/known-dependencies.txt
+++ b/tool/dependencies/known-dependencies.txt
@@ -815,6 +815,7 @@ xmlbeans-5.2.1.jar
 xmlenc-0.52.jar
 xom-1.2.5.jar
 xstream-1.4.20.jar
+xstream-1.4.21.jar
 xz-1.5.jar
 zipkin-2.23.2.jar
 zipkin-reporter-2.16.3.jar
@@ -824,4 +825,4 @@ zookeeper-3.9.2.jar
 zookeeper-jute-3.9.2.jar
 zstd-jni-1.4.5-6.jar
 zstd-jni-1.5.0-4.jar
-spark-measure_2.12-0.24.jar
\ No newline at end of file
+spark-measure_2.12-0.24.jar