diff --git a/CHANGELOG.adoc b/CHANGELOG.adoc
index c060711a..fe214e9a 100644
--- a/CHANGELOG.adoc
+++ b/CHANGELOG.adoc
@@ -25,6 +25,7 @@ Build / Infrastructure::
   * Upgrade Asciidoctorj to v2.5.5 (#591)
   * Upgrade build related Maven plugins to the latest versions (#606)
   * Upgrade Asciidoctorj to v2.5.7 (#604)
+  * Bump netty-codec-http to v4.1.90.Final (fix several CVEs)
 
 Documentation::
 
diff --git a/pom.xml b/pom.xml
index 3fbe5d51..0e9be620 100644
--- a/pom.xml
+++ b/pom.xml
@@ -74,7 +74,7 @@
         <maven.filtering.version>3.2.0</maven.filtering.version>
         <plexus.utils.version>3.0.23</plexus.utils.version>
         <plexus.component.metadata.version>1.7</plexus.component.metadata.version>
-        <netty.version>4.1.77.Final</netty.version>
+        <netty.version>4.1.90.Final</netty.version>
         <doxia.version>1.11.1</doxia.version>
     </properties>