Fix CVE dependency issue (#1927)

diff --git a/helix-core/pom.xml b/helix-core/pom.xml
index 9b6c794..fdd8648 100755
--- a/helix-core/pom.xml
+++ b/helix-core/pom.xml
@@ -139,7 +139,7 @@
     <dependency>
       <groupId>org.apache.httpcomponents</groupId>
       <artifactId>httpclient</artifactId>
-      <version>4.5.8</version>
+      <version>4.5.13</version>
     </dependency>
     <dependency>
       <groupId>javax.xml.bind</groupId>
diff --git a/zookeeper-api/pom.xml b/zookeeper-api/pom.xml
index a3edbb4..61520bb 100644
--- a/zookeeper-api/pom.xml
+++ b/zookeeper-api/pom.xml
@@ -75,7 +75,7 @@
     <dependency>
       <groupId>org.apache.httpcomponents</groupId>
       <artifactId>httpclient</artifactId>
-      <version>4.5.8</version>
+      <version>4.5.13</version>
     </dependency>
     <dependency>
       <groupId>com.fasterxml.jackson.core</groupId>