diff --git a/CHANGES_NEXT_RELEASE b/CHANGES_NEXT_RELEASE
index 0ade85b..dea7623 100644
--- a/CHANGES_NEXT_RELEASE
+++ b/CHANGES_NEXT_RELEASE
@@ -2,3 +2,4 @@
 - [cosmos-hive-auth-provider][feature] Add OAuth2 cache (#225)
 - [cosmos-auth][vulnerability] Upgrade hapi to 11.1.3 
 - [cosmos-tidoop-api][vulnerability] Upgrade hapi to 11.1.3 
+- [cosmos-hive-auth-provider][vulnerability] Upgrade httpclient to 4.3.6 
diff --git a/cosmos-hive-auth-provider/pom.xml b/cosmos-hive-auth-provider/pom.xml
index b3568a6..d62230f 100644
--- a/cosmos-hive-auth-provider/pom.xml
+++ b/cosmos-hive-auth-provider/pom.xml
@@ -26,7 +26,7 @@
         <dependency>
             <groupId>org.apache.httpcomponents</groupId>
             <artifactId>httpclient</artifactId>
-            <version>4.2.5</version>
+            <version>4.3.6</version>
         </dependency>
         <dependency>
             <groupId>log4j</groupId>