diff --git a/backend/build.gradle b/backend/build.gradle
index b30fb548..1ab02a7f 100644
--- a/backend/build.gradle
+++ b/backend/build.gradle
@@ -2,7 +2,7 @@ plugins {
 	id 'java'
 	id 'org.springframework.boot' version '3.5.16'
 	id 'io.spring.dependency-management' version '1.1.7'
-	id 'com.google.protobuf' version '0.10.0'
+	id 'com.google.protobuf' version '0.10.1'
 }
 
 group = 'com.shadowfit'
@@ -44,13 +44,13 @@ dependencies {
 	implementation 'org.flywaydb:flyway-core'
 	implementation 'org.flywaydb:flyway-mysql'
 	implementation 'io.github.cdimascio:dotenv-java:3.2.0'
-	implementation 'org.modelmapper:modelmapper:3.2.6'
-	implementation 'org.springdoc:springdoc-openapi-starter-webmvc-ui:2.9.0'
+	implementation 'org.modelmapper:modelmapper:3.2.8'
+	implementation 'org.springdoc:springdoc-openapi-starter-webmvc-ui:2.10.0'
 	// springdoc(swagger-core-jakarta)이 끌어오는 commons-lang3 3.17.0이 GHSA-j288-q9x7-2f5v
 	// (3.0~3.17.x 취약, 긴 입력 처리 시 무한 재귀)에 걸려 있어 명시적으로 상향.
-	implementation 'org.apache.commons:commons-lang3:3.20.0'
+	implementation 'org.apache.commons:commons-lang3:3.21.0'
 	implementation 'org.springframework.boot:spring-boot-starter-cache'
-	implementation 'com.github.ben-manes.caffeine:caffeine:3.2.4'
+	implementation 'com.github.ben-manes.caffeine:caffeine:3.3.1'
 	implementation 'org.springframework.boot:spring-boot-starter-actuator'
 	// Micrometer 지표를 Prometheus 가 긁어갈 텍스트 형식으로 내보낸다 (/actuator/prometheus).
 	// runtimeOnly 인 이유: 코드가 이 라이브러리를 import 하지 않는다. SessionMetrics 는
@@ -68,7 +68,7 @@ dependencies {
 
 	// Boot 3.5.16이 관리하는 jackson-databind(2.21.4)가 GHSA-5jmj-h7xm-6q6v(2.19.0~2.21.4
 	// 취약)에 걸려 있어 이 모듈만 명시적으로 상향(jackson-bom의 나머지 모듈은 그대로 둠).
-	implementation 'com.fasterxml.jackson.core:jackson-databind:2.22.2'
+	implementation 'com.fasterxml.jackson.core:jackson-databind:2.22.4'
 
 	// spring-boot-starter-logging이 끌어오는 log4j-to-slf4j가 log4j-api(2.24.3)를 물고 오는데,
 	// 이게 GHSA(2.13.1~2.25.4 취약, MapMessage.asJson()의 비정상 부동소수점 JSON 직렬화 결함)에
@@ -90,8 +90,8 @@ dependencies {
 	developmentOnly 'org.springframework.boot:spring-boot-devtools'
 
 	// --- gRPC & Protobuf (버전 정합성 해결) ---
-	def grpcVersion = '1.84.0'
-	def protobufVersion = '4.36.1'
+	def grpcVersion = '1.85.1'
+	def protobufVersion = '4.36.2'
 
 	// Starter는 API만 제공하고 실제 구현체는 아래에서 버전 고정
 	implementation 'net.devh:grpc-client-spring-boot-starter:3.1.0.RELEASE'
@@ -128,11 +128,11 @@ dependencies {
 
 protobuf {
 	protoc {
-		artifact = "com.google.protobuf:protoc:4.36.1"
+		artifact = "com.google.protobuf:protoc:4.36.2"
 	}
 	plugins {
 		grpc {
-			artifact = "io.grpc:protoc-gen-grpc-java:1.84.0"
+			artifact = "io.grpc:protoc-gen-grpc-java:1.85.1"
 		}
 	}
 	generateProtoTasks {
diff --git a/backend/gradle/wrapper/gradle-wrapper.jar b/backend/gradle/wrapper/gradle-wrapper.jar
index 1b33c55b..02f06ab2 100644
Binary files a/backend/gradle/wrapper/gradle-wrapper.jar and b/backend/gradle/wrapper/gradle-wrapper.jar differ
diff --git a/backend/gradle/wrapper/gradle-wrapper.properties b/backend/gradle/wrapper/gradle-wrapper.properties
index 4f5eb9dc..d3f02198 100644
--- a/backend/gradle/wrapper/gradle-wrapper.properties
+++ b/backend/gradle/wrapper/gradle-wrapper.properties
@@ -1,6 +1,6 @@
 distributionBase=GRADLE_USER_HOME
 distributionPath=wrapper/dists
-distributionUrl=https\://services.gradle.org/distributions/gradle-8.14.5-bin.zip
+distributionUrl=https\://services.gradle.org/distributions/gradle-8.14.6-bin.zip
 networkTimeout=10000
 validateDistributionUrl=true
 zipStoreBase=GRADLE_USER_HOME