diff --git a/cdap-common/pom.xml b/cdap-common/pom.xml
index 04a4d8b5c4eb..5e281b6d8e4a 100644
--- a/cdap-common/pom.xml
+++ b/cdap-common/pom.xml
@@ -229,7 +229,7 @@
     <dependency>
       <groupId>org.apache.avro</groupId>
       <artifactId>avro</artifactId>
-      <version>1.11.0</version>
+      <version>1.11.4</version>
       <scope>test</scope>
     </dependency>
     <dependency>
diff --git a/pom.xml b/pom.xml
index dba2cca4b257..d170b7c2376e 100644
--- a/pom.xml
+++ b/pom.xml
@@ -118,7 +118,7 @@
     <apache.jdbm1.version>2.0.0-M2</apache.jdbm1.version>
     <asm.version>7.1</asm.version>
     <async.http.version>1.9.40</async.http.version>
-    <avro.version>1.11.0</avro.version>
+    <avro.version>1.11.4</avro.version>
     <bouncycastle.version>1.70</bouncycastle.version>
     <cdap.common.version>0.13.1</cdap.common.version>
     <cdap.client.version>1.4.0</cdap.client.version>