diff --git a/server/appengine/build.gradle b/server/appengine/build.gradle
index c621bc1fed..28bfaeae83 100644
--- a/server/appengine/build.gradle
+++ b/server/appengine/build.gradle
@@ -65,7 +65,7 @@ dependencies {
 
     implementation 'com.google.firebase:firebase-admin:7.1.0'
     // 4.1.34.Final included in Firebase, which has vulnerabilities.
-    implementation 'io.netty:netty-codec-http:4.1.56.Final'
+    implementation 'io.netty:netty-codec-http:4.1.96.Final'
 
     // Newer versions
     implementation 'com.google.oauth-client:google-oauth-client:1.31.2'
diff --git a/server/build.gradle b/server/build.gradle
index a0f2ed9b7b..0e953168c8 100644
--- a/server/build.gradle
+++ b/server/build.gradle
@@ -19,7 +19,7 @@ buildscript {
             'jdk14': "org.slf4j:slf4j-jdk14:${versions.slf4j}",
         ],
         'firebase': "com.google.firebase:firebase-admin:7.1.0",
-        'netty': 'io.netty:netty-codec-http:4.1.56.Final',
+        'netty': 'io.netty:netty-codec-http:4.1.96.Final',
         'guava': "com.google.guava:guava:30.1-jre",
         'gson': "com.google.code.gson:gson:2.8.6",
         'servlet': "javax.servlet:javax.servlet-api:3.1.0",