diff --git a/pom.xml b/pom.xml
index 8db2798b0da..b29d7d1f298 100644
--- a/pom.xml
+++ b/pom.xml
@@ -25,7 +25,7 @@ the software.
     <description>The parent ORCID pom that all sub-projects reside under</description>
 
     <properties>
-        <spring.version>5.3.20</spring.version>
+        <spring.version>5.3.39</spring.version>
         <security.version>5.6.2</security.version>
         <liquibase.version>4.9.1</liquibase.version>
         <jersey.version>2.27</jersey.version>