diff --git a/ans-sdk-agent-client/build.gradle.kts b/ans-sdk-agent-client/build.gradle.kts
index af21c2b..6ab13eb 100644
--- a/ans-sdk-agent-client/build.gradle.kts
+++ b/ans-sdk-agent-client/build.gradle.kts
@@ -28,7 +28,7 @@ dependencies {
     implementation("org.bouncycastle:bcprov-jdk18on:$bouncyCastleVersion")
 
     // dnsjava for DANE/TLSA DNS lookups (JNDI doesn't support TLSA)
-    implementation("dnsjava:dnsjava:3.6.4")
+    implementation("dnsjava:dnsjava:3.6.5")
 
     // Caffeine for high-performance caching with TTL and automatic eviction
     implementation("com.github.ben-manes.caffeine:caffeine:$caffeineVersion")
diff --git a/ans-sdk-transparency/build.gradle.kts b/ans-sdk-transparency/build.gradle.kts
index caf7a05..fe6b8bf 100644
--- a/ans-sdk-transparency/build.gradle.kts
+++ b/ans-sdk-transparency/build.gradle.kts
@@ -23,7 +23,7 @@ dependencies {
     implementation("org.slf4j:slf4j-api:$slf4jVersion")
 
     // dnsjava for _ra-badge TXT record lookups (JNDI doesn't support all TXT features)
-    implementation("dnsjava:dnsjava:3.6.4")
+    implementation("dnsjava:dnsjava:3.6.5")
 
     // CBOR parsing for SCITT COSE_Sign1 structures
     implementation("com.upokecenter:cbor:$cborVersion")