diff --git a/all/pom.xml b/all/pom.xml
index 7784ab7b1..502f6dfcf 100644
--- a/all/pom.xml
+++ b/all/pom.xml
@@ -59,10 +59,10 @@
         <sofa.common.tools.version>1.4.0</sofa.common.tools.version>
         <javassist.version>3.29.2-GA</javassist.version>
         <netty.version>4.1.44.Final</netty.version>
-        <hessian.version>3.5.3</hessian.version>
+        <hessian.version>3.5.4</hessian.version>
         <resteasy.version>3.6.3.Final</resteasy.version>
         <bolt.version>1.6.10</bolt.version>
-        <tracer.version>3.0.8</tracer.version>
+        <tracer.version>3.1.6</tracer.version>
         <lookout.version>1.4.1</lookout.version>
         <bytebuddy.version>1.9.8</bytebuddy.version>
         <sofa.registry.version>6.3.0</sofa.registry.version>
diff --git a/bom/pom.xml b/bom/pom.xml
index 9991cc70d..3ad5d01a3 100644
--- a/bom/pom.xml
+++ b/bom/pom.xml
@@ -32,7 +32,7 @@
         <guava.version>32.0.0-jre</guava.version>
         <prometheus.client.version>0.16.0</prometheus.client.version>
         <!-- serialization -->
-        <hessian.version>3.5.3</hessian.version>
+        <hessian.version>3.5.4</hessian.version>
         <thrift.version>0.9.2</thrift.version>
         <protobuf.version>3.22.0</protobuf.version>
         <jackson.version>2.12.7</jackson.version>
@@ -55,7 +55,7 @@
         <!-- alipay libs -->
         <bolt.version>1.6.10</bolt.version>
         <sofa.common.tools.version>1.4.0</sofa.common.tools.version>
-        <tracer.version>3.0.8</tracer.version>
+        <tracer.version>3.1.6</tracer.version>
         <lookout.version>1.4.1</lookout.version>
         <!-- Build args -->
         <module.install.skip>true</module.install.skip>