diff --git a/sbin/prepareWorkspace.sh b/sbin/prepareWorkspace.sh
index c90603c94..9c30cb36a 100644
--- a/sbin/prepareWorkspace.sh
+++ b/sbin/prepareWorkspace.sh
@@ -280,7 +280,7 @@ updateOpenj9Sources() {
     cd "${BUILD_CONFIG[WORKSPACE_DIR]}/${BUILD_CONFIG[WORKING_DIR]}/${BUILD_CONFIG[OPENJDK_SOURCE_DIR]}" || return
     # NOTE: fetched openssl will NOT be used in the RISC-V cross-compile situation
     if [[ "${BUILD_CONFIG[OS_KERNEL_NAME]}" = *"cygwin"* ]] || [[ "${BUILD_CONFIG[OS_KERNEL_NAME]}" == "darwin" ]]; then
-      bash get_source.sh --openssl-version=3.0.10
+      bash get_source.sh --openssl-version=openssl-3.0.10+CVEs1 --openssl-repo=https://github.com/ibmruntimes/openssl.git
     else
       # Continue using 1.1.1 until all platforms can build 3.0.10
       bash get_source.sh --openssl-version=1.1.1v