diff --git a/plugins/nf-amazon/build.gradle b/plugins/nf-amazon/build.gradle
index 05ccf6cf45..82a3709305 100644
--- a/plugins/nf-amazon/build.gradle
+++ b/plugins/nf-amazon/build.gradle
@@ -53,6 +53,9 @@ dependencies {
     constraints {
         api 'com.fasterxml.jackson.core:jackson-databind:2.12.7.1'
     }
+
+    // address security vulnerabilities
+    runtimeOnly 'io.netty:netty-common:4.1.115.Final'
         
     testImplementation(testFixtures(project(":nextflow")))
     testImplementation project(':nextflow')
diff --git a/plugins/nf-azure/build.gradle b/plugins/nf-azure/build.gradle
index 4be09b723d..79a4487ae2 100644
--- a/plugins/nf-azure/build.gradle
+++ b/plugins/nf-azure/build.gradle
@@ -47,6 +47,9 @@ dependencies {
         exclude group: 'org.slf4j', module: 'slf4j-api'
     }
 
+    // address security vulnerabilities
+    runtimeOnly 'io.netty:netty-common:4.1.115.Final'
+
     testImplementation(testFixtures(project(":nextflow")))
     testImplementation project(':nextflow')
     testImplementation "org.apache.groovy:groovy:4.0.24"