diff --git a/CHANGELOG.md b/CHANGELOG.md
index f7c68d11..f88001dc 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -1,7 +1,9 @@
 ## placeholder
+* Remove unused dependency `protobuf-java` to resolve CVEs ([#180](https://github.com/microsoft/durabletask-java/pull/180))
 * Fix infinite loop when use continueasnew after wait external event ([#183](https://github.com/microsoft/durabletask-java/pull/183))
 * Fix the issue "Deserialize Exception got swallowed when use anyOf with external event." ([#185](https://github.com/microsoft/durabletask-java/pull/185))
 
+
 ## v1.5.0
 * Fix exception type issue when using `RetriableTask` in fan in/out pattern ([#174](https://github.com/microsoft/durabletask-java/pull/174))
 * Add implementation to generate name-based deterministic UUID ([#176](https://github.com/microsoft/durabletask-java/pull/176))
diff --git a/azurefunctions/build.gradle b/azurefunctions/build.gradle
index adde2f45..99e7312e 100644
--- a/azurefunctions/build.gradle
+++ b/azurefunctions/build.gradle
@@ -8,8 +8,6 @@ group 'com.microsoft'
 version = '1.5.0'
 archivesBaseName = 'durabletask-azure-functions'
 
-def protocVersion = '3.12.0'
-
 repositories {
     maven {
         url "https://oss.sonatype.org/content/repositories/snapshots/"
@@ -19,7 +17,6 @@ repositories {
 dependencies {
     api project(':client')
     implementation group: 'com.microsoft.azure.functions', name: 'azure-functions-java-library', version: '3.0.0'
-    implementation "com.google.protobuf:protobuf-java:${protocVersion}"
     compileOnly "com.microsoft.azure.functions:azure-functions-java-spi:1.0.0"
 }
 
diff --git a/client/build.gradle b/client/build.gradle
index 3588b3ac..f293cf3f 100644
--- a/client/build.gradle
+++ b/client/build.gradle
@@ -12,7 +12,7 @@ version = '1.5.0'
 archivesBaseName = 'durabletask-client'
 
 def grpcVersion = '1.59.0'
-def protocVersion = '3.12.0'
+def protocVersion = '3.25.0'
 def jacksonVersion = '2.15.3'
 // When build on local, you need to set this value to your local jdk11 directory.
 // Java11 is used to compile and run all the tests.