diff --git a/pom.xml b/pom.xml
index 7d0555b1..819f097f 100644
--- a/pom.xml
+++ b/pom.xml
@@ -82,7 +82,7 @@
 			<groupId>org.jenkins-ci.plugins</groupId>
 			<artifactId>envinject</artifactId>
 			<!-- 1.90 and earlier vulnerable: https://www.jenkins.io/security/advisory/2018-02-26/ -->
-			<version>1.91</version>
+			<version>2.866.v5c0403e3d4df</version>
 		</dependency>
 
 		<dependency>