Override transitive dependency version to address security issue

Override transitive dependency version to address security issue #627