diff --git a/performance-testing/uid2-operator/k6-identity-map.js b/performance-testing/uid2-operator/k6-identity-map.js
index 75d087a..3b03d2f 100755
--- a/performance-testing/uid2-operator/k6-identity-map.js
+++ b/performance-testing/uid2-operator/k6-identity-map.js
@@ -1,5 +1,3 @@
-
-import { crypto } from "k6/experimental/webcrypto";
 import encoding from 'k6/encoding';
 import { check } from 'k6';
 import http from 'k6/http';
diff --git a/performance-testing/uid2-operator/k6-token-generate-refresh-identitymap-keysharing.js b/performance-testing/uid2-operator/k6-token-generate-refresh-identitymap-keysharing.js
index 149714d..b1ea0ba 100755
--- a/performance-testing/uid2-operator/k6-token-generate-refresh-identitymap-keysharing.js
+++ b/performance-testing/uid2-operator/k6-token-generate-refresh-identitymap-keysharing.js
@@ -1,5 +1,3 @@
-
-import { crypto } from "k6/experimental/webcrypto";
 import encoding from 'k6/encoding';
 import { check } from 'k6';
 import http from 'k6/http';
diff --git a/performance-testing/uid2-operator/k6-token-generate-refresh-identitymap.js b/performance-testing/uid2-operator/k6-token-generate-refresh-identitymap.js
index 5a705e4..966da87 100644
--- a/performance-testing/uid2-operator/k6-token-generate-refresh-identitymap.js
+++ b/performance-testing/uid2-operator/k6-token-generate-refresh-identitymap.js
@@ -1,5 +1,3 @@
-
-import { crypto } from "k6/experimental/webcrypto";
 import encoding from 'k6/encoding';
 import { check } from 'k6';
 import http from 'k6/http';
diff --git a/performance-testing/uid2-operator/k6-token-generate.js b/performance-testing/uid2-operator/k6-token-generate.js
index 6ef6b67..6f10b36 100755
--- a/performance-testing/uid2-operator/k6-token-generate.js
+++ b/performance-testing/uid2-operator/k6-token-generate.js
@@ -1,5 +1,3 @@
-
-import { crypto } from "k6/experimental/webcrypto";
 import encoding from 'k6/encoding';
 import { check } from 'k6';
 import http from 'k6/http';
diff --git a/performance-testing/uid2-operator/k6-uid2-operator.js b/performance-testing/uid2-operator/k6-uid2-operator.js
index b6d97f4..5af04e9 100644
--- a/performance-testing/uid2-operator/k6-uid2-operator.js
+++ b/performance-testing/uid2-operator/k6-uid2-operator.js
@@ -1,4 +1,3 @@
-import {crypto} from "k6/experimental/webcrypto";
 import encoding from 'k6/encoding';
 import {check} from 'k6';
 import http from 'k6/http';
diff --git a/pom.xml b/pom.xml
index fc897e2..ad6d28a 100644
--- a/pom.xml
+++ b/pom.xml
@@ -43,6 +43,12 @@
                 <type>pom</type>
                 <scope>import</scope>
             </dependency>
+            <!-- Override transitive grpc-netty-shaded to fix CVE-2025-55163 -->
+            <dependency>
+                <groupId>io.grpc</groupId>
+                <artifactId>grpc-netty-shaded</artifactId>
+                <version>1.75.0</version>
+            </dependency>
         </dependencies>
     </dependencyManagement>