diff --git a/pom.xml b/pom.xml
index 5c8eae3..7fd1264 100644
--- a/pom.xml
+++ b/pom.xml
@@ -74,6 +74,17 @@ under the License.
     <mavenFilteringVersion>3.4.0</mavenFilteringVersion>
   </properties>
 
+  <dependencyManagement>
+    <!-- manage transitive dependencies -->
+    <dependencies>
+      <dependency>
+        <groupId>org.apache.commons</groupId>
+        <artifactId>commons-lang3</artifactId>
+        <version>3.17.0</version>
+      </dependency>
+    </dependencies>
+  </dependencyManagement>
+
   <dependencies>
     <!-- maven core -->
     <dependency>
@@ -165,7 +176,7 @@ under the License.
     <dependency>
       <groupId>org.apache.velocity</groupId>
       <artifactId>velocity-engine-core</artifactId>
-      <version>2.3</version>
+      <version>2.4.1</version>
     </dependency>
     <dependency>
       <groupId>javax.inject</groupId>