diff --git a/CHANGES.md b/CHANGES.md
index 71b97f1c9c..ba46245373 100644
--- a/CHANGES.md
+++ b/CHANGES.md
@@ -26,6 +26,7 @@ Release Notes.
 * (Plugin Test) Fix compiling issues in many plugin tests due to they didn't lock the Spring version, and Spring 3 is
   incompatible with 2.x APIs and JDK8 compiling.
 * Support ShardingSphere 5.0.0
+* Bump up gRPC to 1.44.0, fix relative CVEs.
 
 #### Documentation
 
diff --git a/dist-material/LICENSE b/dist-material/LICENSE
index c277831ad4..d4c3372eb1 100755
--- a/dist-material/LICENSE
+++ b/dist-material/LICENSE
@@ -216,11 +216,11 @@ The following components are provided under the Apache License. See project link
 The text of each license is the standard Apache 2.0 license.
 
     raphw (byte-buddy) 1.11.18: http://bytebuddy.net/ , Apache 2.0
-    Google: grpc-java 1.42.1: https://github.com/grpc/grpc-java, Apache 2.0
+    Google: grpc-java 1.44.0: https://github.com/grpc/grpc-java, Apache 2.0
     Google: gson 2.8.6: https://github.com/google/gson , Apache 2.0
     Google: proto-google-common-protos 2.0.1: https://github.com/googleapis/googleapis , Apache 2.0
     Google: jsr305 3.0.2: http://central.maven.org/maven2/com/google/code/findbugs/jsr305/3.0.0/jsr305-3.0.0.pom , Apache 2.0
-    netty 4.1.65: https://github.com/netty/netty/blob/4.1/LICENSE.txt, Apache 2.0
+    netty 4.1.72: https://github.com/netty/netty/blob/4.1/LICENSE.txt, Apache 2.0
 
 ========================================================================
 BSD licenses
diff --git a/pom.xml b/pom.xml
index 0c7be8ff90..cc30adbb58 100755
--- a/pom.xml
+++ b/pom.xml
@@ -87,13 +87,13 @@
 
         <!-- core lib dependency -->
         <bytebuddy.version>1.11.18</bytebuddy.version>
-        <grpc.version>1.42.1</grpc.version>
+        <grpc.version>1.44.0</grpc.version>
         <gson.version>2.8.6</gson.version>
         <os-maven-plugin.version>1.6.2</os-maven-plugin.version>
         <protobuf-maven-plugin.version>0.6.1</protobuf-maven-plugin.version>
         <com.google.protobuf.protoc.version>3.17.3</com.google.protobuf.protoc.version>
-        <protoc-gen-grpc-java.plugin.version>1.42.1</protoc-gen-grpc-java.plugin.version>
-        <netty-tcnative-boringssl-static.version>2.0.39.Final</netty-tcnative-boringssl-static.version>
+        <protoc-gen-grpc-java.plugin.version>1.44.0</protoc-gen-grpc-java.plugin.version>
+        <netty-tcnative-boringssl-static.version>2.0.48.Final</netty-tcnative-boringssl-static.version>
         <javax.annotation-api.version>1.3.2</javax.annotation-api.version>
         <objenesis.version>3.1</objenesis.version>
         <!-- necessary for Java 9+ -->