diff --git a/buildSrc/src/main/groovy/cda.deps-conventions.gradle b/buildSrc/src/main/groovy/cda.deps-conventions.gradle
index 0543e6692..51608bd09 100644
--- a/buildSrc/src/main/groovy/cda.deps-conventions.gradle
+++ b/buildSrc/src/main/groovy/cda.deps-conventions.gradle
@@ -21,11 +21,12 @@ configurations.all {
     exclude group: "org.python", module: "jython-standalone"
 
     resolutionStrategy {
-        // javalin 4.6.8 pulls in the vulnerable kotlin-stdlib 1.5.32 
+        // javalin 4.6.8 pulls in the vulnerable kotlin-stdlib 1.5.32
         // Force a patched version; javalin can't be bumped past 4.x while we target Java 11.
         force "org.jetbrains.kotlin:kotlin-stdlib:1.9.25"
         force "org.jetbrains.kotlin:kotlin-stdlib-common:1.9.25"
         force "org.jetbrains.kotlin:kotlin-stdlib-jdk7:1.9.25"
         force "org.jetbrains.kotlin:kotlin-stdlib-jdk8:1.9.25"
+        force "org.codehaus.plexus:plexus-utils:3.6.1"
     }
 }