diff --git a/core/pom.xml b/core/pom.xml
index 0402553742ec..a673984c13ed 100644
--- a/core/pom.xml
+++ b/core/pom.xml
@@ -39,8 +39,8 @@ THE SOFTWARE.
 
   <properties>
     <staplerFork>true</staplerFork>
-    <stapler.version>1.258</stapler.version>
-    <spring.version>2.5.6.SEC03</spring.version>
+    <stapler.version>1.263</stapler.version>
+    <spring.version>5.2.22.RELEASE</spring.version>
     <groovy.version>2.4.12</groovy.version>
   </properties>
 
@@ -126,7 +126,7 @@ THE SOFTWARE.
     <dependency>
       <groupId>com.github.jnr</groupId>
       <artifactId>jnr-posix</artifactId>
-      <version>3.0.45</version>
+      <version>3.1.8</version>
     </dependency>
     <dependency>
       <groupId>org.kohsuke.stapler</groupId>
@@ -306,12 +306,12 @@ THE SOFTWARE.
     <dependency>
       <groupId>commons-beanutils</groupId>
       <artifactId>commons-beanutils</artifactId>
-      <version>1.9.3</version>
+      <version>1.9.4</version>
     </dependency>
     <dependency>
         <groupId>org.apache.commons</groupId>
         <artifactId>commons-compress</artifactId>
-        <version>1.19</version>
+        <version>1.21</version>
     </dependency>
     <dependency>
       <groupId>javax.mail</groupId>
@@ -364,7 +364,7 @@ THE SOFTWARE.
     <dependency>
       <groupId>commons-jelly</groupId>
       <artifactId>commons-jelly-tags-xml</artifactId>
-      <version>1.1</version>
+      <version>20030211.142705</version>
       <exclusions>
         <exclusion>
           <groupId>commons-jelly</groupId>
@@ -609,7 +609,7 @@ THE SOFTWARE.
     <dependency>
       <groupId>commons-fileupload</groupId>
       <artifactId>commons-fileupload</artifactId>
-      <version>1.3.1-jenkins-2</version> 
+      <version>1.3.3</version> 
     </dependency>
 
     <!-- offline profiler API to put in the classpath if we need it -->
@@ -808,7 +808,7 @@ THE SOFTWARE.
             <manifest>
               <mainClass>hudson.Main</mainClass>
               <addClasspath>true</addClasspath>
-              <classpathPrefix />
+              <classpathPrefix/>
             </manifest>
           </archive>
         </configuration>