diff --git a/CHANGELOG.md b/CHANGELOG.md
index 20a4554..83c2a2f 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -11,6 +11,7 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 ### Security
 
 * Update transitive dependency on org.apache.httpcomponents.core5:httpcore5 5.2.1 to 5.4.3 to address CVE.
+* Update transitive dependency on org.apache.httpcomponents.core5:httpcore5-h2 5.2.1 to 5.4.3 to address CVE.
 
 ## [4.0.2]
 
diff --git a/pom.xml b/pom.xml
index d525318..877dd54 100644
--- a/pom.xml
+++ b/pom.xml
@@ -95,6 +95,10 @@
           <groupId>org.apache.httpcomponents.core5</groupId>
           <artifactId>httpcore5</artifactId>
         </exclusion>
+        <exclusion>
+          <groupId>org.apache.httpcomponents.core5</groupId>
+          <artifactId>httpcore5-h2</artifactId>
+        </exclusion>
       </exclusions>
     </dependency>
     <dependency>
@@ -102,6 +106,11 @@
       <artifactId>httpcore5</artifactId>
       <version>5.4.3</version>
     </dependency>
+    <dependency>
+      <groupId>org.apache.httpcomponents.core5</groupId>
+      <artifactId>httpcore5-h2</artifactId>
+      <version>5.4.3</version>
+    </dependency>
 
     <dependency>
       <groupId>org.junit.jupiter</groupId>