diff --git a/CHANGES.md b/CHANGES.md
index 6097fc6698..4c85ab32cc 100644
--- a/CHANGES.md
+++ b/CHANGES.md
@@ -9,6 +9,7 @@ Release Notes.
 * Fix wrong config name `plugin.toolkit.use_qualified_name_as_operation_name`, and system variable name `SW_PLUGIN_TOOLKIT_USE_QUALIFIED_NAME_AS_OPERATION_NAME:false`. They were **toolit**.
 * Rename `JDBI` to `JDBC`
 * Support collecting dubbo thread pool metrics
+* Bump up byte-buddy to 1.12.19
 
 #### Documentation
 
diff --git a/dist-material/LICENSE b/dist-material/LICENSE
index c90e8e6c3f..e2c7a77be5 100755
--- a/dist-material/LICENSE
+++ b/dist-material/LICENSE
@@ -215,7 +215,7 @@ Apache 2.0 licenses
 The following components are provided under the Apache License. See project link for details.
 The text of each license is the standard Apache 2.0 license.
 
-    raphw (byte-buddy) 1.12.13: http://bytebuddy.net/ , Apache 2.0
+    raphw (byte-buddy) 1.12.19: http://bytebuddy.net/ , Apache 2.0
     Google: grpc-java 1.50.0: https://github.com/grpc/grpc-java, Apache 2.0
     Google: gson 2.8.9: https://github.com/google/gson , Apache 2.0
     Google: proto-google-common-protos 2.0.1: https://github.com/googleapis/googleapis , Apache 2.0
diff --git a/pom.xml b/pom.xml
index b3119b00f0..d802424a41 100755
--- a/pom.xml
+++ b/pom.xml
@@ -86,7 +86,7 @@
         <lombok.version>1.18.20</lombok.version>
 
         <!-- core lib dependency -->
-        <bytebuddy.version>1.12.13</bytebuddy.version>
+        <bytebuddy.version>1.12.19</bytebuddy.version>
         <grpc.version>1.50.0</grpc.version>
         <netty.version>4.1.79.Final</netty.version>
         <gson.version>2.8.9</gson.version>