diff --git a/com.ibm.streamsx.hdfs/CHANGELOG.md b/com.ibm.streamsx.hdfs/CHANGELOG.md
index 74a48b6..9a8e1e8 100644
--- a/com.ibm.streamsx.hdfs/CHANGELOG.md
+++ b/com.ibm.streamsx.hdfs/CHANGELOG.md
@@ -1,6 +1,12 @@
# Changes
=======
+## v5.3.3:
+* [#133}fix Vulnerabilities in 3rd party jar libraries)
+
+## v5.3.2:
+* [#133](https://github.com/IBMStreams/streamsx.hdfs/issues/140) slf4j jars updated (fix the log4j issue)
+
## v5.3.2:
* [#133](https://github.com/IBMStreams/streamsx.hdfs/issues/140) slf4j jars updated (fix the log4j issue)
diff --git a/com.ibm.streamsx.hdfs/info.xml b/com.ibm.streamsx.hdfs/info.xml
index f6f77e5..5f48c6f 100644
--- a/com.ibm.streamsx.hdfs/info.xml
+++ b/com.ibm.streamsx.hdfs/info.xml
@@ -207,9 +207,13 @@ The 'tempFile' parameter specifies the name of the file that the operator writes
* pom.xml updated to use slf4j libraries version 1.7.36
+++ What is new in version 5.3.3
+
+* pom.xml updated to use the latest apache libraries
+
- 5.3.2
+ 5.3.3
4.2.0.0
diff --git a/com.ibm.streamsx.hdfs/pom.xml b/com.ibm.streamsx.hdfs/pom.xml
index 8c77a0a..0a430e8 100644
--- a/com.ibm.streamsx.hdfs/pom.xml
+++ b/com.ibm.streamsx.hdfs/pom.xml
@@ -8,7 +8,7 @@
com.ibm.streamsx.hdfs
streamsx.hdfs
jar
- 5.3.2
+ 5.3.3
com.ibm.streamsx.hdfs
@@ -23,7 +23,7 @@
commons-cli
commons-cli
- 1.4
+ 1.5.0
*
@@ -35,7 +35,7 @@
commons-codec
commons-codec
- 1.15
+ 1.16.0
*
@@ -59,7 +59,7 @@
org.apache.commons
commons-configuration2
- 2.7
+ 2.9.0
*
@@ -72,7 +72,7 @@
commons-io
commons-io
- 2.7
+ 2.13.0
*
@@ -96,7 +96,7 @@
org.apache.commons
commons-lang3
- 3.9
+ 3.13.0
*
@@ -109,20 +109,21 @@
commons-logging
commons-logging
1.2
-
-
- *
- *
-
-
-
+
+
+ *
+ *
+
+
+
+
com.google.guava
guava
- 30.0-jre
+ 32.1.2-jre
*
@@ -206,7 +207,7 @@
org.apache.httpcomponents
httpcore
- 4.4.13
+ 4.4.16
*
@@ -218,7 +219,7 @@
com.fasterxml.jackson.core
jackson-core
- 2.11.2
+ 2.15.2
*
@@ -230,7 +231,7 @@
com.fasterxml.jackson.core
jackson-annotations
- 2.11.2
+ 2.15.2
*
@@ -242,7 +243,7 @@
com.fasterxml.jackson.core
jackson-databind
- 2.11.2
+ 2.15.2
*
@@ -291,7 +292,7 @@
com.google.protobuf
protobuf-java
- 3.13.0
+ 3.24.3
*
@@ -303,7 +304,7 @@
com.google.re2j
re2j
- 1.4
+ 1.7
*
@@ -317,19 +318,19 @@
javax.servlet-api
4.0.1
provided
-
-
- *
- *
-
-
+
+
+ *
+ *
+
+
org.slf4j
slf4j-api
- 1.7.36
+ 2.0.9
*
@@ -341,7 +342,7 @@
org.slf4j
slf4j-log4j12
- 1.7.36
+ 2.0.9
*
@@ -365,7 +366,7 @@
com.fasterxml.woodstox
woodstox-core
- 6.2.1
+ 6.5.1
*
@@ -378,7 +379,7 @@
org.apache.commons
commons-compress
- 1.20
+ 1.24.0
*
@@ -387,17 +388,17 @@
-
- org.apache.hadoop.thirdparty
- hadoop-shaded-protobuf_3_7
- 1.0.0
-
-
- *
- *
-
-
-
+
+ org.apache.hadoop.thirdparty
+ hadoop-shaded-protobuf_3_7
+ 1.0.0
+
+
+ *
+ *
+
+
+