diff --git a/dist-material/release-docs/LICENSE b/dist-material/release-docs/LICENSE
index 6e0abc9d70..2f1fdd10e3 100644
--- a/dist-material/release-docs/LICENSE
+++ b/dist-material/release-docs/LICENSE
@@ -237,7 +237,7 @@ The text of each license is the standard Apache 2.0 license.
     https://mvnrepository.com/artifact/com.google.guava/listenablefuture/9999.0-empty-to-avoid-conflict-with-guava Apache-2.0
     https://mvnrepository.com/artifact/com.google.inject/guice/4.1.0 Apache-2.0
     https://mvnrepository.com/artifact/com.google.j2objc/j2objc-annotations/2.8 Apache-2.0
-    https://mvnrepository.com/artifact/com.graphql-java/java-dataloader/3.2.0 Apache-2.0
+    https://mvnrepository.com/artifact/com.graphql-java/java-dataloader/3.2.1 Apache-2.0
     https://mvnrepository.com/artifact/com.linecorp.armeria/armeria/1.29.3 Apache-2.0
     https://mvnrepository.com/artifact/com.linecorp.armeria/armeria-graphql/1.29.3 Apache-2.0
     https://mvnrepository.com/artifact/com.linecorp.armeria/armeria-graphql-protocol/1.29.3 Apache-2.0
@@ -514,7 +514,7 @@ The text of each license is also included in licenses/LICENSE-[project].txt.
     https://npmjs.com/package/axios/node_modules/proxy-from-env/v/1.1.0 1.1.0 MIT
     https://npmjs.com/package/batch-processor/v/1.0.0 1.0.0 MIT
     https://mvnrepository.com/artifact/com.graphql-java-kickstart/graphql-java-tools/13.0.1 MIT
-    https://mvnrepository.com/artifact/com.graphql-java/graphql-java/21.0 MIT
+    https://mvnrepository.com/artifact/com.graphql-java/graphql-java/21.5 MIT
     https://mvnrepository.com/artifact/com.graphql-java/graphql-java-extended-scalars/18.1 MIT
     https://npmjs.com/package/combined-stream/v/1.0.8 1.0.8 MIT
     https://npmjs.com/package/component-emitter/v/1.3.0 1.3.0 MIT
diff --git a/docs/en/changes/changes.md b/docs/en/changes/changes.md
index 20e463feb3..eff84e5d9a 100644
--- a/docs/en/changes/changes.md
+++ b/docs/en/changes/changes.md
@@ -44,6 +44,7 @@
 * Bump up Armeria and transitive dependencies.
 * BanyanDB: if the model column is already a `@BanyanDB.TimestampColumn`, set `@BanyanDB.NoIndexing` on it to reduce indexes.
 * BanyanDB: stream sort-by `time` query, use internal time-series rather than `index` to improve the query performance.
+* Bump up graphql-java to 21.5.
 
 #### UI
 
diff --git a/oap-server-bom/pom.xml b/oap-server-bom/pom.xml
index 083372ee87..2c548e698d 100644
--- a/oap-server-bom/pom.xml
+++ b/oap-server-bom/pom.xml
@@ -32,7 +32,7 @@
         <log4j.version>2.17.1</log4j.version>
         <google.error_prone_annotations>2.11.0</google.error_prone_annotations>
         <graphql-java-tools.version>13.0.1</graphql-java-tools.version>
-        <graphql-java.version>21.0</graphql-java.version>
+        <graphql-java.version>21.5</graphql-java.version>
         <graphql-java-extended-scalars.version>18.1</graphql-java-extended-scalars.version>
         <okhttp.version>3.14.9</okhttp.version>
         <httpclient.version>4.5.13</httpclient.version>