diff --git a/build.sbt b/build.sbt
index 3397ae0..ade9185 100644
--- a/build.sbt
+++ b/build.sbt
@@ -79,6 +79,8 @@ libraryDependencies += "com.typesafe.play" %% "play-mailer" % "3.0.1"
 
 libraryDependencies += "com.google.caliper" % "caliper" % "1.0-beta-2"
 
+libraryDependencies += "org.apache.httpcomponents" % "httpclient" % "4.3.6" // evict the vulnerable version
+
 routesImport += "binders.QueryBinders._"
 
 // Uncomment to use Akka
diff --git a/project/plugins.sbt b/project/plugins.sbt
index a180aa3..ff32627 100644
--- a/project/plugins.sbt
+++ b/project/plugins.sbt
@@ -1,5 +1,5 @@
 // The Play plugin
-addSbtPlugin("com.typesafe.play" % "sbt-plugin" % "2.4.4")
+addSbtPlugin("com.typesafe.play" % "sbt-plugin" % "2.4.6")
 
 // web plugins