diff --git a/modules/jooby-bom/pom.xml b/modules/jooby-bom/pom.xml
index 11d3c5d99b..e68a1d0317 100644
--- a/modules/jooby-bom/pom.xml
+++ b/modules/jooby-bom/pom.xml
@@ -112,7 +112,7 @@
   <rocker.version>1.3.0</rocker.version>
   <rxjava.version>2.2.21</rxjava.version>
   <slf4j.version>1.7.30</slf4j.version>
-  <spring.version>5.3.4</spring.version>
+  <spring.version>5.3.8</spring.version>
   <stork-maven-plugin.version>3.1.1</stork-maven-plugin.version>
   <swagger-parser.version>2.0.24</swagger-parser.version>
   <swagger.version>2.1.6</swagger.version>
diff --git a/pom.xml b/pom.xml
index a6a6949458..f88a3d3c3c 100644
--- a/pom.xml
+++ b/pom.xml
@@ -45,7 +45,7 @@
 
     <!-- dependency injection -->
     <weld.version>3.1.5.Final</weld.version>
-    <spring.version>5.3.4</spring.version>
+    <spring.version>5.3.8</spring.version>
     <guice.version>4.2.3</guice.version>
 
     <!-- logging -->