diff --git a/modules/drivers/bigquery-cloud-sdk/deps.edn b/modules/drivers/bigquery-cloud-sdk/deps.edn
index 0ae0250c63fba863574d8abee897bef1b65d1b2c..46d7c7f90d89ede55982191240b43c70fdeb0016 100644
--- a/modules/drivers/bigquery-cloud-sdk/deps.edn
+++ b/modules/drivers/bigquery-cloud-sdk/deps.edn
@@ -3,6 +3,7 @@
 
  :deps
  ;; TODO: figure out how to be able to leave off this version string and use the version from the BOM
- {com.google.cloud/google-cloud-bigquery {:mvn/version "1.135.4"}
+ {com.google.cloud/google-cloud-bigquery      {:mvn/version "1.135.4"}
   ;; CVE on 2.8.7 from bigquery (NB: also in googleanalytics)
-  com.google.code.gson/gson {:mvn/version "2.8.9"}}}
+  com.google.code.gson/gson                   {:mvn/version "2.8.9"}
+  com.google.oauth-client/google-oauth-client {:mvn/version "1.33.3"}}}
diff --git a/modules/drivers/googleanalytics/deps.edn b/modules/drivers/googleanalytics/deps.edn
index efb1309cb0f5d57f7a8bcf5cc950c16ae6fbe8c5..c4a79b8976f31d73f649c5737b7e460b02f0d461 100644
--- a/modules/drivers/googleanalytics/deps.edn
+++ b/modules/drivers/googleanalytics/deps.edn
@@ -4,6 +4,7 @@
  {com.google.apis/google-api-services-analytics      {:mvn/version "v3-rev20190807-1.32.1"}
   ;; CVE on 2.8.7 from google api services (NB: also in bigquery-cloud-sdk)
   com.google.code.gson/gson                          {:mvn/version "2.8.9"}
+  com.google.oauth-client/google-oauth-client        {:mvn/version "1.33.3"}
   ;; for some reason, Google stopped depending on google-http-client-jackson2 from google-api-client somewhere between
   ;; 1.30.7 and 1.32.1, so we must explicitly bring it in because the google driver uses it directly
   com.google.http-client/google-http-client-jackson2 {:mvn/version "1.39.2-sp.1"}}}