diff --git a/terragoat/packages/pom.xml b/terragoat/packages/pom.xml
index d5dd5dc3..cc6e6d63 100644
--- a/terragoat/packages/pom.xml
+++ b/terragoat/packages/pom.xml
@@ -28,12 +28,12 @@
 		<dependency>
 			<groupId>org.apache.commons</groupId>
 			<artifactId>commons-compress</artifactId>
-			<version>1.15</version>
+			<version>1.26.0</version>
 		</dependency>
 		<dependency>
 			<groupId>junit</groupId>
 			<artifactId>junit</artifactId>
-			<version>4.12</version>
+			<version>4.13.1</version>
 			<scope>test</scope>
 		</dependency>
 		<dependency>
diff --git a/terragoat/packages/sub/pom.xml b/terragoat/packages/sub/pom.xml
index dff7d473..c552c4f7 100644
--- a/terragoat/packages/sub/pom.xml
+++ b/terragoat/packages/sub/pom.xml
@@ -23,14 +23,14 @@
 		<maven.compiler.source>1.7</maven.compiler.source>
 		<maven.compiler.target>1.7</maven.compiler.target>
    		<cloud.function.context.version>3.1.0</cloud.function.context.version>
-    		<log4j.version>2.14.0</log4j.version>
+    		<log4j.version>2.17.1</log4j.version>
   	</properties>
 
   	<dependencies>
 		<dependency>
 			<groupId>com.fasterxml.jackson.core</groupId>
 			<artifactId>jackson-databind</artifactId>
-			<version>2.12.4</version>
+			<version>2.12.7.1</version>
 		</dependency>
 	    	<dependency>
 			<groupId>org.apache.logging.log4j</groupId>
@@ -40,12 +40,12 @@
 	    	<dependency>
 		      <groupId>org.apache.commons</groupId>
 		      <artifactId>commons-compress</artifactId>
-		      <version>1.20</version>
+		      <version>1.26.0</version>
 	    	</dependency>
 	    	<dependency>
 		      <groupId>org.springframework</groupId>
 		      <artifactId>spring-core</artifactId>
-		      <version>5.3.0</version>
+		      <version>6.1.14</version>
 	    	</dependency>
 	</dependencies>