diff --git a/openai-java-client-okhttp/build.gradle.kts b/openai-java-client-okhttp/build.gradle.kts
index 56c150db7..537d3d170 100644
--- a/openai-java-client-okhttp/build.gradle.kts
+++ b/openai-java-client-okhttp/build.gradle.kts
@@ -20,6 +20,9 @@ dependencies {
         testImplementation("com.jayway.jsonpath:json-path:2.10.0") {
             because("WireMock's transitive JSONPath version has a stack-overflow vulnerability")
         }
+        testImplementation("org.apache.commons:commons-lang3:3.18.0") {
+            because("WireMock's transitive 3.12.0 release is vulnerable to uncontrolled recursion")
+        }
     }
 
     api(project(":openai-java-core"))
diff --git a/openai-java-core/build.gradle.kts b/openai-java-core/build.gradle.kts
index 05d93d3ac..a4b4643dd 100644
--- a/openai-java-core/build.gradle.kts
+++ b/openai-java-core/build.gradle.kts
@@ -53,6 +53,9 @@ dependencies {
         testImplementation("com.jayway.jsonpath:json-path:2.10.0") {
             because("WireMock's transitive JSONPath version has a stack-overflow vulnerability")
         }
+        testImplementation("org.apache.commons:commons-lang3:3.18.0") {
+            because("WireMock's transitive 3.12.0 release is vulnerable to uncontrolled recursion")
+        }
     }
 
     api("com.fasterxml.jackson.core:jackson-core:$jacksonPublishedVersion")