diff --git a/mock-plugin/pom.xml b/mock-plugin/pom.xml
index 353c480..43d2d61 100644
--- a/mock-plugin/pom.xml
+++ b/mock-plugin/pom.xml
@@ -66,6 +66,17 @@
 		</repository>
 	</distributionManagement>
 
+	<dependencyManagement>
+		<dependencies>
+			<!-- Override transitive Bouncy Castle version to fix CVEs -->
+			<dependency>
+				<groupId>org.bouncycastle</groupId>
+				<artifactId>bcpkix-jdk18on</artifactId>
+				<version>1.80</version>
+			</dependency>
+		</dependencies>
+	</dependencyManagement>
+
 	<properties>
 		<java.version>21</java.version>
 		<project.build.sourceEncoding>UTF-8</project.build.sourceEncoding>
@@ -85,7 +96,7 @@
 		<spring-cloud.version>2023.0.8</spring-cloud.version>
 		<spring.boot.version>3.2.12</spring.boot.version>
 
-		<kernel-keymanager-service.version>1.3.0-beta.4</kernel-keymanager-service.version>
+		<kernel-keymanager-service.version>1.3.0</kernel-keymanager-service.version>
 		<esignet.version>1.8.1-SNAPSHOT</esignet.version>
 		<esignet-signup.version>1.4.1-SNAPSHOT</esignet-signup.version>
 
diff --git a/mosip-identity-plugin/pom.xml b/mosip-identity-plugin/pom.xml
index 60ad6e2..85c6e65 100644
--- a/mosip-identity-plugin/pom.xml
+++ b/mosip-identity-plugin/pom.xml
@@ -66,6 +66,36 @@
 		</repository>
 	</distributionManagement>
 
+	<dependencyManagement>
+		<dependencies>
+			<!-- Override transitive spring-security version to fix CVEs -->
+			<!-- Spring Boot 3.2.x is compatible with Spring Security 6.2.x -->
+			<dependency>
+				<groupId>org.springframework.security</groupId>
+				<artifactId>spring-security-bom</artifactId>
+				<version>6.2.8</version>
+				<type>pom</type>
+				<scope>import</scope>
+			</dependency>
+			<!-- Override transitive Bouncy Castle versions to keep the set aligned -->
+			<dependency>
+				<groupId>org.bouncycastle</groupId>
+				<artifactId>bcprov-jdk18on</artifactId>
+				<version>1.80</version>
+			</dependency>
+			<dependency>
+				<groupId>org.bouncycastle</groupId>
+				<artifactId>bcutil-jdk18on</artifactId>
+				<version>1.80</version>
+			</dependency>
+			<dependency>
+				<groupId>org.bouncycastle</groupId>
+				<artifactId>bcpkix-jdk18on</artifactId>
+				<version>1.80</version>
+			</dependency>
+		</dependencies>
+	</dependencyManagement>
+
 	<properties>
 		<java.version>21</java.version>
 		<project.build.sourceEncoding>UTF-8</project.build.sourceEncoding>
@@ -85,7 +115,7 @@
 		<spring-cloud.version>2023.0.8</spring-cloud.version>
 		<spring.boot.version>3.2.12</spring.boot.version>
 
-		<kernel-keymanager-service.version>1.3.0-beta.4</kernel-keymanager-service.version>
+		<kernel-keymanager-service.version>1.3.0</kernel-keymanager-service.version>
 		<esignet.version>1.8.1-SNAPSHOT</esignet.version>
 		<esignet-signup.version>1.4.1-SNAPSHOT</esignet-signup.version>
 
@@ -116,7 +146,7 @@
 		<dependency>
 			<groupId>io.mosip.biometric.util</groupId>
 			<artifactId>biometrics-util</artifactId>
-			<version>1.3.0-beta.1</version>
+			<version>1.3.0</version>
 			<exclusions>
 				<exclusion>
 					<groupId>com.fasterxml.jackson.core</groupId>
diff --git a/sunbird-rc-plugin/pom.xml b/sunbird-rc-plugin/pom.xml
index fb341c4..ec31f2e 100644
--- a/sunbird-rc-plugin/pom.xml
+++ b/sunbird-rc-plugin/pom.xml
@@ -64,6 +64,17 @@
 		</repository>
 	</distributionManagement>
 
+	<dependencyManagement>
+		<dependencies>
+			<!-- Override transitive Bouncy Castle version to fix CVEs -->
+			<dependency>
+				<groupId>org.bouncycastle</groupId>
+				<artifactId>bcpkix-jdk18on</artifactId>
+				<version>1.80</version>
+			</dependency>
+		</dependencies>
+	</dependencyManagement>
+
 	<properties>
 		<project.build.sourceEncoding>UTF-8</project.build.sourceEncoding>
 		<java.version>21</java.version>
@@ -85,7 +96,7 @@
 		<sonar.exclusions>**/dto/**,**/entity/**,**/exception/**,**/spi/**,**/advice/**,**/config/**</sonar.exclusions>
 		<sonar.cpd.exclusions>**/dto/**,**/entity/**,**/config/**</sonar.cpd.exclusions>
 		<sonar.coverage.exclusions>**/dto/**,**/entity/**,**/exception/**,**/spi/**,**/advice/**,**/config/**</sonar.coverage.exclusions>
-		<kernel-keymanager-service.version>1.3.0-beta.4</kernel-keymanager-service.version>
+		<kernel-keymanager-service.version>1.3.0</kernel-keymanager-service.version>
 	</properties>
 	<dependencies>
 	
@@ -140,8 +151,8 @@
 		<!-- https://mvnrepository.com/artifact/org.apache.velocity/velocity -->
 		<dependency>
 			<groupId>org.apache.velocity</groupId>
-			<artifactId>velocity</artifactId>
-			<version>1.7</version>
+			<artifactId>velocity-engine-core</artifactId>
+			<version>2.3</version>
 		</dependency>
 
 		<dependency>