diff --git a/pom.xml b/pom.xml
index fa14b3c1cb..9a7770738b 100644
--- a/pom.xml
+++ b/pom.xml
@@ -10,7 +10,7 @@
     <url>https://github.com/snyk/java-goof</url>
 
     <properties>
-        <spring.version>3.2.6.RELEASE</spring.version>
+        <spring.version>4.3.8.RELEASE</spring.version>
         <hibernate.version>4.3.7.Final</hibernate.version>
         <tapestry.version>5.3.8</tapestry.version>
         <struts2.version>2.3.20</struts2.version>
diff --git a/todolist-core/pom.xml b/todolist-core/pom.xml
index 705976a3e1..c4802b0fdc 100644
--- a/todolist-core/pom.xml
+++ b/todolist-core/pom.xml
@@ -87,7 +87,7 @@
         <dependency>
             <groupId>commons-collections</groupId>
             <artifactId>commons-collections</artifactId>
-            <version>3.2.1</version>
+            <version>20030418.083655</version>
         </dependency>
 
         <!-- test dependencies -->