diff --git a/pom.xml b/pom.xml
index fa14b3c1cb..fdd15b23ba 100644
--- a/pom.xml
+++ b/pom.xml
@@ -10,8 +10,8 @@
     <url>https://github.com/snyk/java-goof</url>
 
     <properties>
-        <spring.version>3.2.6.RELEASE</spring.version>
-        <hibernate.version>4.3.7.Final</hibernate.version>
+        <spring.version>3.2.9.RELEASE</spring.version>
+        <hibernate.version>5.4.24.Final</hibernate.version>
         <tapestry.version>5.3.8</tapestry.version>
         <struts2.version>2.3.20</struts2.version>
         <project.build.sourceEncoding>UTF-8</project.build.sourceEncoding>
diff --git a/todolist-core/pom.xml b/todolist-core/pom.xml
index 705976a3e1..e49bf3c5cf 100644
--- a/todolist-core/pom.xml
+++ b/todolist-core/pom.xml
@@ -87,7 +87,7 @@
         <dependency>
             <groupId>commons-collections</groupId>
             <artifactId>commons-collections</artifactId>
-            <version>3.2.1</version>
+            <version>3.2.2</version>
         </dependency>
 
         <!-- test dependencies -->