diff --git a/sdks/java/io/iceberg/hive/build.gradle b/sdks/java/io/iceberg/hive/build.gradle
index b0c2ac64918e..11c8118b4bc2 100644
--- a/sdks/java/io/iceberg/hive/build.gradle
+++ b/sdks/java/io/iceberg/hive/build.gradle
@@ -57,6 +57,8 @@ dependencies {
     }
     // add manually higher version to resolve CVE-2025-59250
     runtimeOnly ("com.microsoft.sqlserver:mssql-jdbc:12.2.0.jre11")
+    // resolve CVE-2024-57699
+    runtimeOnly("net.minidev:json-smart:2.5.2")
     runtimeOnly ("org.apache.hbase:hbase-client:$hbase_version")
     runtimeOnly ("org.apache.calcite.avatica:avatica-core:$avatica_version")
     // these exlusions were inherit from hive-exec-3.1.3.pom