diff --git a/openai-java-client-okhttp/build.gradle.kts b/openai-java-client-okhttp/build.gradle.kts
index 4d1eb6170..032589e32 100644
--- a/openai-java-client-okhttp/build.gradle.kts
+++ b/openai-java-client-okhttp/build.gradle.kts
@@ -4,6 +4,12 @@ plugins {
 }
 
 dependencies {
+    constraints {
+        testImplementation("commons-io:commons-io:2.22.0") {
+            because("WireMock's transitive Commons IO version has a resource-exhaustion vulnerability")
+        }
+    }
+
     api(project(":openai-java-core"))
 
     implementation("com.squareup.okhttp3:okhttp:4.12.0")
diff --git a/openai-java-core/build.gradle.kts b/openai-java-core/build.gradle.kts
index b386f1dbb..ba05a1a06 100644
--- a/openai-java-core/build.gradle.kts
+++ b/openai-java-core/build.gradle.kts
@@ -32,6 +32,12 @@ configurations.matching { it.name != jacksonPublishedRuntime.name }.configureEac
 }
 
 dependencies {
+    constraints {
+        testImplementation("commons-io:commons-io:2.22.0") {
+            because("WireMock's transitive Commons IO version has a resource-exhaustion vulnerability")
+        }
+    }
+
     api("com.fasterxml.jackson.core:jackson-core:$jacksonPublishedVersion")
     api("com.fasterxml.jackson.core:jackson-databind:$jacksonPublishedVersion")
     api("com.google.errorprone:error_prone_annotations:2.33.0")