diff --git a/celeborn-0.5.yaml b/celeborn-0.5.yaml
index 4cc6294434a..8f0e1081473 100644
--- a/celeborn-0.5.yaml
+++ b/celeborn-0.5.yaml
@@ -1,7 +1,7 @@
 package:
   name: celeborn-0.5
   version: 0.5.4
-  epoch: 6
+  epoch: 7 # GHSA-3p8m-j85q-pgmj
   description: "Apache Celeborn - A Remote Shuffle Service for Distributed Data Processing Engines"
   copyright:
     - license: Apache-2.0
diff --git a/celeborn-0.5/pombump-deps.yaml b/celeborn-0.5/pombump-deps.yaml
index 4e56ad2c140..d4f0c641205 100644
--- a/celeborn-0.5/pombump-deps.yaml
+++ b/celeborn-0.5/pombump-deps.yaml
@@ -5,3 +5,6 @@ patches:
   - groupId: com.fasterxml.jackson.core
     artifactId: jackson-core
     version: 2.13.0
+  - groupId: io.netty
+    artifactId: netty-codec
+    version: 4.1.125.Final