diff --git a/core/pom.xml b/core/pom.xml
index deea426e6d46..0c1c437f45e4 100644
--- a/core/pom.xml
+++ b/core/pom.xml
@@ -428,7 +428,7 @@ THE SOFTWARE.
     <dependency>
       <groupId>org.springframework</groupId>
       <artifactId>spring-core</artifactId>
-      <version>2.5</version>
+      <version>5.2.22.RELEASE</version>
     </dependency>
     <dependency><!-- Jenkins core doesn't use it but HUDSON-3811 requires us to put it. -->
       <groupId>org.springframework</groupId>