diff --git a/build-logic/src/main/kotlin/chirp.kotlin-common.gradle.kts b/build-logic/src/main/kotlin/chirp.kotlin-common.gradle.kts
index d81b9ed..655276d 100644
--- a/build-logic/src/main/kotlin/chirp.kotlin-common.gradle.kts
+++ b/build-logic/src/main/kotlin/chirp.kotlin-common.gradle.kts
@@ -35,3 +35,22 @@ tasks.withType<KotlinCompile> {
 tasks.withType<Test> {
     useJUnitPlatform()
 }
+
+configurations.all {
+    resolutionStrategy.eachDependency {
+        // Force Netty to safe version (fixes CVE-2025-55163, CVE-2025-67735)
+        if (requested.group == "io.netty") {
+            useVersion("4.2.9.Final")
+        }
+
+        // Force gRPC Netty to patched version (Firebase SDK transitive fix)
+        if (requested.group == "io.grpc" && requested.name == "grpc-netty-shaded") {
+            useVersion("1.75.0")
+        }
+
+        // Force commons-lang3 to patched version
+        if (requested.group == "org.apache.commons" && requested.name == "commons-lang3") {
+            useVersion("3.18.0")
+        }
+    }
+}