diff --git a/extra/pom.xml b/extra/pom.xml
index ff6f5a429e5..fa586a49327 100644
--- a/extra/pom.xml
+++ b/extra/pom.xml
@@ -53,6 +53,7 @@
         <protoc.version>${protobuf.version}</protoc.version>
         <json-logic.version>1.0.7</json-logic.version>
         <aws.awssdk.version>2.26.24</aws.awssdk.version>
+        <netty-handler.version>4.1.118.Final</netty-handler.version>
 
         <!-- Project test dependency versions -->
         <wiremock.version>3.9.1</wiremock.version>
@@ -74,6 +75,12 @@
 
     <dependencyManagement>
         <dependencies>
+            <!-- set netty-handler version for CVE-2025-24970-->
+            <dependency>
+                <groupId>io.netty</groupId>
+                <artifactId>netty-handler</artifactId>
+                <version>${netty-handler.version}</version>
+            </dependency>
             <dependency>
                 <groupId>org.springframework.boot</groupId>
                 <artifactId>spring-boot-dependencies</artifactId>