diff --git a/Jarfile b/Jarfile
index 03b8b76e..a8a50b5c 100644
--- a/Jarfile
+++ b/Jarfile
@@ -13,9 +13,9 @@ jar 'com.github.crawler-commons:crawler-commons', '1.2'
 jar 'commons-io:commons-io', '2.16.1'
 
 # Apache HTTP client used for requests to websites
-# Pinned to 5.5.1+ to pull in httpcore5/httpcore5-h2 5.3.6, resolving CVE-2025-8671
-# (HTTP/2 stream-reset DoS in httpcore5-h2 < 5.3.5)
-jar 'org.apache.httpcomponents.client5:httpclient5', '5.5.1'
+# Pinned to 5.6.2+ to pull in httpcore5/httpcore5-h2 5.4.3, resolving
+# CVE-2025-8671, CVE-2026-54399, and CVE-2026-54428 (HTTP DoS in httpcore5-h2).
+jar 'org.apache.httpcomponents.client5:httpclient5', '5.6.2'
 
 # For managing Brotli input streams
 jar 'org.apache.commons:commons-compress', '1.27.1'
diff --git a/Jars.lock b/Jars.lock
index c58d49d7..35cf7340 100644
--- a/Jars.lock
+++ b/Jars.lock
@@ -14,9 +14,9 @@ org.bouncycastle:bcutil-jdk18on:1.84:compile:
 com.github.crawler-commons:crawler-commons:1.2:compile:
 org.slf4j:slf4j-api:1.7.7:compile:
 commons-io:commons-io:2.16.1:compile:
-org.apache.httpcomponents.client5:httpclient5:5.5.1:compile:
-org.apache.httpcomponents.core5:httpcore5:5.3.6:compile:
-org.apache.httpcomponents.core5:httpcore5-h2:5.3.6:compile:
+org.apache.httpcomponents.client5:httpclient5:5.6.2:compile:
+org.apache.httpcomponents.core5:httpcore5:5.4.3:compile:
+org.apache.httpcomponents.core5:httpcore5-h2:5.4.3:compile:
 org.apache.commons:commons-compress:1.27.1:compile:
 commons-codec:commons-codec:1.17.1:compile:
 org.apache.commons:commons-lang3:3.16.0:compile:
diff --git a/vendor/jars/org/apache/httpcomponents/client5/httpclient5/5.5.1/httpclient5-5.5.1.jar b/vendor/jars/org/apache/httpcomponents/client5/httpclient5/5.6.2/httpclient5-5.6.2.jar
similarity index 56%
rename from vendor/jars/org/apache/httpcomponents/client5/httpclient5/5.5.1/httpclient5-5.5.1.jar
rename to vendor/jars/org/apache/httpcomponents/client5/httpclient5/5.6.2/httpclient5-5.6.2.jar
index 1939f913..eb1d05e2 100644
Binary files a/vendor/jars/org/apache/httpcomponents/client5/httpclient5/5.5.1/httpclient5-5.5.1.jar and b/vendor/jars/org/apache/httpcomponents/client5/httpclient5/5.6.2/httpclient5-5.6.2.jar differ
diff --git a/vendor/jars/org/apache/httpcomponents/core5/httpcore5-h2/5.3.6/httpcore5-h2-5.3.6.jar b/vendor/jars/org/apache/httpcomponents/core5/httpcore5-h2/5.3.6/httpcore5-h2-5.3.6.jar
deleted file mode 100644
index 0abc3fdb..00000000
Binary files a/vendor/jars/org/apache/httpcomponents/core5/httpcore5-h2/5.3.6/httpcore5-h2-5.3.6.jar and /dev/null differ
diff --git a/vendor/jars/org/apache/httpcomponents/core5/httpcore5-h2/5.4.3/httpcore5-h2-5.4.3.jar b/vendor/jars/org/apache/httpcomponents/core5/httpcore5-h2/5.4.3/httpcore5-h2-5.4.3.jar
new file mode 100644
index 00000000..d6b79b5e
Binary files /dev/null and b/vendor/jars/org/apache/httpcomponents/core5/httpcore5-h2/5.4.3/httpcore5-h2-5.4.3.jar differ
diff --git a/vendor/jars/org/apache/httpcomponents/core5/httpcore5/5.3.6/httpcore5-5.3.6.jar b/vendor/jars/org/apache/httpcomponents/core5/httpcore5/5.4.3/httpcore5-5.4.3.jar
similarity index 55%
rename from vendor/jars/org/apache/httpcomponents/core5/httpcore5/5.3.6/httpcore5-5.3.6.jar
rename to vendor/jars/org/apache/httpcomponents/core5/httpcore5/5.4.3/httpcore5-5.4.3.jar
index 0c46bdcc..70c5aa18 100644
Binary files a/vendor/jars/org/apache/httpcomponents/core5/httpcore5/5.3.6/httpcore5-5.3.6.jar and b/vendor/jars/org/apache/httpcomponents/core5/httpcore5/5.4.3/httpcore5-5.4.3.jar differ