diff --git a/openai-java-client-okhttp/build.gradle.kts b/openai-java-client-okhttp/build.gradle.kts
index 212d2e708..4b3ffc9d4 100644
--- a/openai-java-client-okhttp/build.gradle.kts
+++ b/openai-java-client-okhttp/build.gradle.kts
@@ -14,6 +14,9 @@ dependencies {
         testImplementation("org.xmlunit:xmlunit-core:2.11.0") {
             because("2.10.0 fixes CVE-2024-31573 in this test-only dependency")
         }
+        testImplementation("commons-io:commons-io:2.22.0") {
+            because("WireMock's transitive Commons IO version has a resource-exhaustion vulnerability")
+        }
     }
 
     api(project(":openai-java-core"))
diff --git a/openai-java-core/build.gradle.kts b/openai-java-core/build.gradle.kts
index 692b370ee..77f7bb636 100644
--- a/openai-java-core/build.gradle.kts
+++ b/openai-java-core/build.gradle.kts
@@ -47,6 +47,9 @@ dependencies {
         testImplementation("org.xmlunit:xmlunit-core:2.11.0") {
             because("2.10.0 fixes CVE-2024-31573 in this test-only dependency")
         }
+        testImplementation("commons-io:commons-io:2.22.0") {
+            because("WireMock's transitive Commons IO version has a resource-exhaustion vulnerability")
+        }
     }
 
     api("com.fasterxml.jackson.core:jackson-core:$jacksonPublishedVersion")