diff --git a/linkis-commons/linkis-storage/pom.xml b/linkis-commons/linkis-storage/pom.xml
index 52f9ede595..6e04016fa7 100644
--- a/linkis-commons/linkis-storage/pom.xml
+++ b/linkis-commons/linkis-storage/pom.xml
@@ -76,7 +76,7 @@
     <dependency>
       <groupId>com.github.pjfanning</groupId>
       <artifactId>excel-streaming-reader</artifactId>
-      <version>4.3.0</version>
+      <version>5.0.2</version>
     </dependency>
 
     <dependency>
diff --git a/linkis-dist/release-docs/LICENSE b/linkis-dist/release-docs/LICENSE
index 6fcb383da0..1161ce48f0 100644
--- a/linkis-dist/release-docs/LICENSE
+++ b/linkis-dist/release-docs/LICENSE
@@ -288,9 +288,9 @@ See licenses/ for text of these licenses.
     (Apache License, Version 2.0) Apache Log4j JUL Adapter (org.apache.logging.log4j:log4j-jul:2.17.1 - https://logging.apache.org/log4j/2.x/log4j-jul/)
     (Apache License, Version 2.0) Apache Log4j SLF4J Binding (org.apache.logging.log4j:log4j-slf4j-impl:2.17.1 - https://logging.apache.org/log4j/2.x/log4j-slf4j-impl/)
     (Apache License, Version 2.0) Apache Log4j Web (org.apache.logging.log4j:log4j-web:2.6.2 - http://logging.apache.org/log4j/2.x/log4j-web/)
-    (Apache License, Version 2.0) Apache POI (org.apache.poi:poi:5.2.5 - http://poi.apache.org/)
-    (Apache License, Version 2.0) Apache POI (org.apache.poi:poi-ooxml:5.2.5 - http://poi.apache.org/)
-    (Apache License, Version 2.0) Apache POI (org.apache.poi:poi-ooxml-lite:5.2.5 - http://poi.apache.org/)
+    (Apache License, Version 2.0) Apache POI (org.apache.poi:poi:5.3.0 - http://poi.apache.org/)
+    (Apache License, Version 2.0) Apache POI (org.apache.poi:poi-ooxml:5.3.0 - http://poi.apache.org/)
+    (Apache License, Version 2.0) Apache POI (org.apache.poi:poi-ooxml-lite:5.3.0 - http://poi.apache.org/)
     (Apache License, Version 2.0) Apache Velocity (org.apache.velocity:velocity:1.5 - http://velocity.apache.org/engine/releases/velocity-1.5/)
     (Apache License, Version 2.0) ApacheDS I18n (org.apache.directory.server:apacheds-i18n:2.0.0-M15 - http://directory.apache.org/apacheds/1.5/apacheds-i18n)
     (Apache License, Version 2.0) ApacheDS Protocol Kerberos Codec (org.apache.directory.server:apacheds-kerberos-codec:2.0.0-M15 - http://directory.apache.org/apacheds/1.5/apacheds-kerberos-codec)
@@ -420,7 +420,7 @@ See licenses/ for text of these licenses.
     (Apache License, Version 2.0) Spring Web MVC (org.springframework:spring-webmvc:5.2.2.RELEASE - https://github.com/spring-projects/spring-framework)
     (Apache License, Version 2.0) Spring WebFlux (org.springframework:spring-webflux:5.2.2.RELEASE - https://github.com/spring-projects/spring-framework)
     (Apache License, Version 2.0) StAX API (stax:stax-api:1.0.1 - http://stax.codehaus.org/)
-    (Apache License, Version 2.0) Streaming Excel reader (com.github.pjfanning:excel-streaming-reader:4.3.0 - https://github.com/pjfanning/excel-streaming-reader)
+    (Apache License, Version 2.0) Streaming Excel reader (com.github.pjfanning:excel-streaming-reader:5.0.2 - https://github.com/pjfanning/excel-streaming-reader)
     (Apache License, Version 2.0) Woodstox (com.fasterxml.woodstox:woodstox-core:5.2.1 - https://github.com/FasterXML/woodstox)
     (Apache License, Version 2.0) XML Commons Resolver Component (xml-resolver:xml-resolver:1.2 - http://xml.apache.org/commons/components/resolver/)
     (Apache License, Version 2.0) Xerces2 Java (com.rackspace.apache:xerces2-xsd11:2.11.1 - http://xerces.apache.org/xerces2-j/)
@@ -503,7 +503,7 @@ See licenses/ for text of these licenses.
     (Apache License, version 2.0) chill-java (com.twitter:chill-java:0.7.6 - https://github.com/twitter/chill)
     (Apache License, version 2.0) chill_2.11 (com.twitter:chill_2.11:0.7.6 - https://github.com/twitter/chill)
     (Apache License, version 2.0) druid (com.alibaba:druid:1.1.22 - https://github.com/alibaba/druid)
-    (Apache License, version 2.0) excel-streaming-reader (com.github.pjfanning:excel-streaming-reader:4.3.0 - https://github.com/pjfanning/excel-streaming-reader)
+    (Apache License, version 2.0) excel-streaming-reader (com.github.pjfanning:excel-streaming-reader:5.0.2 - https://github.com/pjfanning/excel-streaming-reader)
     (Apache License, version 2.0) failureaccess (com.google.guava:failureaccess:1.0.1)
     (Apache License, version 2.0) flink-connector-base (org.apache.flink:flink-connector-base:1.12.2 - https://flink.apache.org/)
     (Apache License, version 2.0) flink-connector-files (org.apache.flink:flink-connector-files:1.12.2 - https://flink.apache.org/)
@@ -560,7 +560,6 @@ See licenses/ for text of these licenses.
     (Apache License, version 2.0) okhttp:Square’s meticulous HTTP client for Java and Kotlin. (com.squareup.okhttp:okhttp:2.7.5 - https://square.github.io/okhttp/)
     (Apache License, version 2.0) okio:A modern I/O API for Java (com.squareup.okio:okio:1.6.0 - https://github.com/square/okio/)
     (Apache License, version 2.0) opencsv:A simple library for reading and writing CSV in Java (net.sf.opencsv:opencsv:2.3 - http://opencsv.sf.net)
-    (Apache License, version 2.0) POI Shared Strings Memory efficient Shared Strings Table implementation for POI streaming (com.github.pjfanning:poi-shared-strings:2.8.0 - https://github.com/pjfanning/poi-shared-strings)
     (Apache License, version 2.0) snappy-java: A fast compression/decompression library (org.xerial.snappy:snappy-java:1.1.7.7 - https://github.com/xerial/snappy-java)
     (Apache License, version 2.0) SparseBitSet: An efficient sparse bitset implementation for Java (com.zaxxer:SparseBitSet:1.3 - https://github.com/brettwooldridge/SparseBitSet)
     (Apache License, version 2.0) Spring Plugin - Core Core plugin infrastructure (org.springframework.plugin:spring-plugin-core:2.0.0.RELEASE - https://github.com/spring-projects/spring-plugin)
@@ -578,7 +577,7 @@ See licenses/ for text of these licenses.
     (Apache License, version 2.0) swagger-annotations (io.swagger:swagger-annotations:1.5.22 - https://github.com/swagger-api)
     (Apache License, version 2.0) swagger-models (io.swagger:swagger-models:1.5.22 - https://github.com/swagger-api)
     (Apache License, version 2.0) token-provider (org.apache.kerby:token-provider:1.0.1)
-    (Apache License, version 2.0) XmlBeans:XmlBeans main jar (org.apache.xmlbeans:xmlbeans:5.2.0 - https://xmlbeans.apache.org/)
+    (Apache License, version 2.0) XmlBeans:XmlBeans main jar (org.apache.xmlbeans:xmlbeans:5.2.1 - https://xmlbeans.apache.org/)
     (Apache License, version 2.0) XStream Core (com.thoughtworks.xstream:xstream:1.4.18)
     (Apache License, version 2.0) Apache ZooKeeper - Server (org.apache.zookeeper:zookeeper:3.4.6 - https://zookeeper.apache.org/)
     (Apache License, version 2.0) Apache twill (org.apache.twill:* - https://twill.apache.org/)
diff --git a/pom.xml b/pom.xml
index b49645fdb9..0eeea76b4b 100644
--- a/pom.xml
+++ b/pom.xml
@@ -170,7 +170,7 @@
 
     <knife4j.version>3.0.3</knife4j.version>
     <springfox.version>3.0.0</springfox.version>
-    <poi.version>5.2.5</poi.version>
+    <poi.version>5.3.0</poi.version>
     <reflections.version>0.9.12</reflections.version>
 
     <!-- dbs -->
@@ -189,7 +189,7 @@
     <commons-logging.version>1.2</commons-logging.version>
     <commons-text.version>1.10.0</commons-text.version>
     <commons-math3.version>3.6.1</commons-math3.version>
-    <commons-io.version>2.11.0</commons-io.version>
+    <commons-io.version>2.17.0</commons-io.version>
     <commons-beanutils.version>1.9.4</commons-beanutils.version>
     <commons-compress.version>1.26.1</commons-compress.version>
     <commons-configuration.version>1.10</commons-configuration.version>
diff --git a/tool/dependencies/known-dependencies.txt b/tool/dependencies/known-dependencies.txt
index 6587cbbb5b..dde592da55 100644
--- a/tool/dependencies/known-dependencies.txt
+++ b/tool/dependencies/known-dependencies.txt
@@ -91,7 +91,7 @@ commons-el-1.0.jar
 commons-exec-1.3.jar
 commons-fileupload-1.5.jar
 commons-httpclient-3.1.jar
-commons-io-2.11.0.jar
+commons-io-2.17.0.jar
 commons-jxpath-1.3.jar
 commons-lang-2.6.jar
 commons-lang3-3.12.0.jar
@@ -130,7 +130,7 @@ esri-geometry-api-2.0.0.jar
 eureka-client-1.10.17.jar
 eureka-core-1.10.17.jar
 evictor-1.0.0.jar
-excel-streaming-reader-4.3.0.jar
+excel-streaming-reader-5.0.2.jar
 expiringmap-0.5.6.jar
 failsafe-2.4.0.jar
 failureaccess-1.0.1.jar
@@ -629,10 +629,9 @@ pagehelper-5.3.1.jar
 paranamer-2.3.jar
 paranamer-2.8.jar
 parquet-hadoop-bundle-1.10.0.jar
-poi-5.2.5.jar
-poi-ooxml-5.2.5.jar
-poi-ooxml-lite-5.2.5.jar
-poi-shared-strings-2.8.0.jar
+poi-5.3.0.jar
+poi-ooxml-5.3.0.jar
+poi-ooxml-lite-5.3.0.jar
 presto-client-0.234.jar
 presto-client-1.5.0.jar
 presto-resource-group-managers-0.234.jar
@@ -794,7 +793,7 @@ xalan-2.7.0.jar
 xercesImpl-2.9.1.jar
 xml-apis-1.4.01.jar
 xml-apis-ext-1.3.04.jar
-xmlbeans-5.2.0.jar
+xmlbeans-5.2.1.jar
 xmlenc-0.52.jar
 xom-1.2.5.jar
 xstream-1.4.20.jar