diff --git a/dependencies.md b/dependencies.md
index c63d44b7..56bbf098 100644
--- a/dependencies.md
+++ b/dependencies.md
@@ -118,11 +118,11 @@
 [17]: https://www.alluxio.io/alluxio-dora/alluxio-core/alluxio-core-client/alluxio-core-client-hdfs/
 [18]: https://github.com/alluxio/alluxio/blob/master/LICENSE
 [19]: https://metrics.dropwizard.io/metrics-core
-[20]: https://github.com/protocolbuffers/protobuf/tree/main/java
+[20]: https://developers.google.com/protocol-buffers/protobuf-java/
 [21]: https://opensource.org/licenses/BSD-3-Clause
-[22]: https://github.com/GoogleCloudDataproc/hadoop-connectors/tree/master/gcs
-[23]: https://github.com/googleapis/google-oauth-java-client
-[24]: https://orc.apache.org/
+[22]: https://github.com/GoogleCloudPlatform/BigData-interop/gcs-connector/
+[23]: https://github.com/googleapis/google-oauth-java-client/google-oauth-client
+[24]: https://orc.apache.org/orc-core
 [25]: https://avro.apache.org
 [26]: https://commons.apache.org/proper/commons-compress/
 [27]: https://delta.io/
diff --git a/doc/changes/changes_2.7.6.md b/doc/changes/changes_2.7.6.md
index dfd08aae..16a52b58 100644
--- a/doc/changes/changes_2.7.6.md
+++ b/doc/changes/changes_2.7.6.md
@@ -28,7 +28,6 @@ This release fixes vulnerabilities
 * Updated `org.apache.logging.log4j:log4j-api:2.20.0` to `2.21.1`
 * Updated `org.apache.logging.log4j:log4j-core:2.20.0` to `2.21.1`
 * Added `org.apache.zookeeper:zookeeper:3.9.1`
-* Updated `org.scala-lang:scala-library:2.13.11` to `2.13.12`
 
 #### Test Dependency Updates
 
diff --git a/pom.xml b/pom.xml
index 995c39d8..217e76c5 100644
--- a/pom.xml
+++ b/pom.xml
@@ -14,7 +14,7 @@
         <relativePath>pk_generated_parent.pom</relativePath>
     </parent>
     <properties>
-        <scala.version>2.13.12</scala.version>
+        <scala.version>2.13.11</scala.version>
         <scala.compat.version>2.13</scala.compat.version>
         <hadoop.version>3.3.6</hadoop.version>
         <log4j.version>2.21.1</log4j.version>
@@ -191,6 +191,7 @@
             <version>${hadoop.version}</version>
         </dependency>
         <dependency>
+            <!-- override version 3.6.3 to fix vulnerability CVE-2023-42503 -->
             <groupId>org.apache.zookeeper</groupId>
             <artifactId>zookeeper</artifactId>
             <version>3.9.1</version>
@@ -328,6 +329,7 @@
                     <artifactId>grpc-core</artifactId>
                 </exclusion>
                 <exclusion>
+                    <!-- exclude to avoid vulnerability CVE-2023-46120 in version 5.5.3 -->
                     <groupId>com.rabbitmq</groupId>
                     <artifactId>amqp-client</artifactId>
                 </exclusion>