diff --git a/pom.xml b/pom.xml
index ccb34b7..2b3048c 100644
--- a/pom.xml
+++ b/pom.xml
@@ -25,14 +25,19 @@
 
         <packageDirectory>${project.basedir}/web-service/target/package</packageDirectory>
 
-        <vertx.version>4.5.22</vertx.version>
+        <!-- 修复安全漏洞: 升级到最新安全版本 -->
+        <!-- Vert.x 4.5.11修复: static handler缓存操纵漏洞和XSS漏洞 -->
+        <vertx.version>4.5.11</vertx.version>
+        <!-- Netty 4.1.115.Final修复: CRLF注入漏洞(CVE-2024-47535) -->
+        <netty.version>4.1.115.Final</netty.version>
         <org.reflections.version>0.10.2</org.reflections.version>
         <lombok.version>1.18.38</lombok.version>
-        <slf4j.version>2.0.5</slf4j.version>
+        <slf4j.version>2.0.16</slf4j.version>
         <commons-lang3.version>3.18.0</commons-lang3.version>
         <commons-beanutils2.version>2.0.0</commons-beanutils2.version>
-        <jackson.version>2.14.2</jackson.version>
-        <logback.version>1.5.19</logback.version>
+        <jackson.version>2.18.2</jackson.version>
+        <!-- Logback 1.5.15修复: 任意代码执行漏洞(CVE-2024-12798)和类实例化漏洞(CVE-2023-6378) -->
+        <logback.version>1.5.15</logback.version>
         <junit.version>4.13.2</junit.version>
     </properties>
 
@@ -46,6 +51,27 @@
                 <scope>import</scope>
             </dependency>
 
+            <!-- 强制使用安全版本的Netty来修复CRLF注入漏洞 -->
+            <dependency>
+                <groupId>io.netty</groupId>
+                <artifactId>netty-bom</artifactId>
+                <version>${netty.version}</version>
+                <type>pom</type>
+                <scope>import</scope>
+            </dependency>
+
+            <!-- 强制使用安全版本的logback来修复代码执行漏洞 -->
+            <dependency>
+                <groupId>ch.qos.logback</groupId>
+                <artifactId>logback-classic</artifactId>
+                <version>${logback.version}</version>
+            </dependency>
+            <dependency>
+                <groupId>ch.qos.logback</groupId>
+                <artifactId>logback-core</artifactId>
+                <version>${logback.version}</version>
+            </dependency>
+
             <dependency>
                 <groupId>cn.qaiu</groupId>
                 <artifactId>core</artifactId>