diff --git a/extensions-core/azure-extensions/pom.xml b/extensions-core/azure-extensions/pom.xml
index 88a1198b61e1..141b7bfeb876 100644
--- a/extensions-core/azure-extensions/pom.xml
+++ b/extensions-core/azure-extensions/pom.xml
@@ -54,6 +54,8 @@
         <dependency>
             <groupId>com.azure</groupId>
             <artifactId>azure-identity</artifactId>
+            <!-- fixing the version here while we wait for an updated azure-sdk-bom -->
+            <version>1.12.2</version>
         </dependency>
         <dependency>
             <groupId>com.azure</groupId>
diff --git a/extensions-core/druid-ranger-security/pom.xml b/extensions-core/druid-ranger-security/pom.xml
index 83bb38ca2060..a7c60412e80d 100644
--- a/extensions-core/druid-ranger-security/pom.xml
+++ b/extensions-core/druid-ranger-security/pom.xml
@@ -41,6 +41,12 @@
                 <artifactId>woodstox-core</artifactId>
                 <version>6.4.0</version>
             </dependency>
+            <!-- override the solrj dependency version to address: CVE-2023-50298 -->
+            <dependency>
+                <groupId>org.apache.solr</groupId>
+                <artifactId>solr-solrj</artifactId>
+                <version>8.11.3</version>
+            </dependency>
         </dependencies>
     </dependencyManagement>
 
diff --git a/licenses.yaml b/licenses.yaml
index 3c1f7b0b2d46..d1ebab522b1f 100644
--- a/licenses.yaml
+++ b/licenses.yaml
@@ -4209,7 +4209,7 @@ license_category: binary
 module: extensions/druid-azure-extensions
 license_name: MIT License
 copyright: Microsoft
-version: 1.12.0
+version: 1.12.2
 libraries:
   - com.azure: azure-identity
 
@@ -4307,7 +4307,7 @@ license_category: binary
 module: extensions/druid-azure-extensions
 license_name: MIT License
 copyright: Microsoft
-version: 1.15.0
+version: 1.15.1
 libraries:
   - com.microsoft.azure: msal4j
 
@@ -4871,7 +4871,7 @@ libraries:
 
 name: org.apache.solr solr-solrj
 license_category: binary
-version: 8.11.2
+version: 8.11.3
 module: druid-ranger-security
 license_name: Apache License version 2.0
 libraries: