diff --git a/pom.xml b/pom.xml
index 5595fd741f368..74bfd4be0b185 100644
--- a/pom.xml
+++ b/pom.xml
@@ -206,7 +206,7 @@ flexible messaging model and an intuitive client API.</description>
     <kubernetesclient.version>18.0.0</kubernetesclient.version>
     <okhttp3.version>4.9.3</okhttp3.version>
     <!-- use okio version that matches the okhttp3 version -->
-    <okio.version>2.8.0</okio.version>
+    <okio.version>1.17.6</okio.version>
     <!-- override kotlin-stdlib used by okio in order to address CVE-2020-29582 -->
     <kotlin-stdlib.version>1.4.32</kotlin-stdlib.version>
     <nsq-client.version>1.0</nsq-client.version>
diff --git a/pulsar-sql/pom.xml b/pulsar-sql/pom.xml
index 815fe98f52223..517680fef5207 100644
--- a/pulsar-sql/pom.xml
+++ b/pulsar-sql/pom.xml
@@ -42,7 +42,7 @@
         <!-- keep using okhttp3 3.x for Presto -->
         <okhttp3.version>3.14.9</okhttp3.version>
         <!-- use okio version that matches the okhttp3 version -->
-        <okio.version>1.17.2</okio.version>
+        <okio.version>1.17.6</okio.version>
         <airlift.version>0.199</airlift.version>
     </properties>