diff --git a/pom.xml b/pom.xml
index 0e2886c089..3a029434ae 100644
--- a/pom.xml
+++ b/pom.xml
@@ -313,7 +313,7 @@
         <slf4j.version>1.7.10</slf4j.version>
         <spring.version>6.1.20</spring.version>
         <spring-ldap.version>2.0.2.RELEASE</spring-ldap.version>
-        <springsecurity.version>6.4.6</springsecurity.version>
+        <springsecurity.version>6.4.11</springsecurity.version>
         <javax-el.version>2.2.4</javax-el.version>
         <spring-ws.version>4.0.15</spring-ws.version>
         <tfs-library.version>11.0.0</tfs-library.version>
diff --git a/threadfix-sonar-plugin/pom.xml b/threadfix-sonar-plugin/pom.xml
index 93c8a20a98..1a94640064 100644
--- a/threadfix-sonar-plugin/pom.xml
+++ b/threadfix-sonar-plugin/pom.xml
@@ -151,7 +151,7 @@
         <!-- This means we must use a compatible version of hibernate -->
         <hibernate.version>3.3.2.GA</hibernate.version>
         <!-- Unfortunately Spring 4 only supports hibernate 3.6+. This is the most recent 3.x release -->
-        <spring.version>3.2.13.RELEASE</spring.version>
+        <spring.version>6.2.11</spring.version>
     </properties>
 
     <modelVersion>4.0.0</modelVersion>