diff --git a/geoserver/src/pom.xml b/geoserver/src/pom.xml
index 5fc2d770..468d817d 100644
--- a/geoserver/src/pom.xml
+++ b/geoserver/src/pom.xml
@@ -1966,7 +1966,7 @@
   <gt.version>23-SNAPSHOT</gt.version>
   <gwc.version>1.17-SNAPSHOT</gwc.version>
   <jts.version>1.16.1</jts.version>
-  <spring.version>5.1.13.RELEASE</spring.version>
+  <spring.version>5.2.21.RELEASE</spring.version>
   <spring.security.version>5.1.8.RELEASE</spring.security.version>
   <servlet-api.version>3.0.1</servlet-api.version>
   <jetty.version>9.4.18.v20190429</jetty.version>