diff --git a/pom.xml b/pom.xml
index 588ffe3b..93ab9b38 100644
--- a/pom.xml
+++ b/pom.xml
@@ -79,7 +79,7 @@
 			<groupId>org.jenkins-ci.plugins</groupId>
 			<artifactId>envinject</artifactId>
 			<!-- 1.90 and earlier vulnerable: https://www.jenkins.io/security/advisory/2018-02-26/ -->
-			<version>1.91</version>
+			<version>2.881.v37c62073ff97</version>
 		</dependency>
 		<dependency>
 			<groupId>org.jenkins-ci.plugins</groupId>