diff --git a/CHANGELOG.md b/CHANGELOG.md
index 8e5fee333..ab93091de 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -9,6 +9,7 @@ Inspired from [Keep a Changelog](https://keepachangelog.com/en/1.0.0/)
 - Bumps `org.hamcrest:hamcrest` from 2.2 to 3.0
 - Bumps `com.github.jk1.dependency-license-report` from 2.8 to 2.9
 - Bumps `org.ajoberstar.grgit:grgit-gradle` from 5.2.2 to 5.3.0
+- Bumps `org.apache.httpcomponents.core5:httpcore5-h2` from 5.3 to 5.3.1
 
 This section is for maintaining a changelog for all breaking changes for the client that cannot be released in the 2.x line. All other non-breaking changes should be added to [Unreleased 2.x] section.
 
@@ -571,4 +572,4 @@ This section is for maintaining a changelog for all breaking changes for the cli
 [2.5.0]: https://github.com/opensearch-project/opensearch-java/compare/v2.4.0...v2.5.0
 [2.4.0]: https://github.com/opensearch-project/opensearch-java/compare/v2.3.0...v2.4.0
 [2.3.0]: https://github.com/opensearch-project/opensearch-java/compare/v2.2.0...v2.3.0
-[2.2.0]: https://github.com/opensearch-project/opensearch-java/compare/v2.1.0...v2.2.0
+[2.2.0]: https://github.com/opensearch-project/opensearch-java/compare/v2.1.0...v2.2.0
\ No newline at end of file
diff --git a/java-client/build.gradle.kts b/java-client/build.gradle.kts
index 01478f1a0..99deec39c 100644
--- a/java-client/build.gradle.kts
+++ b/java-client/build.gradle.kts
@@ -190,7 +190,7 @@ dependencies {
       exclude(group = "org.apache.httpcomponents.core5")
     }
     api("org.apache.httpcomponents.core5:httpcore5:5.3")
-    api("org.apache.httpcomponents.core5:httpcore5-h2:5.3")
+    api("org.apache.httpcomponents.core5:httpcore5-h2:5.3.1")
 
     // Apache 2.0
     // https://search.maven.org/artifact/com.google.code.findbugs/jsr305