diff --git a/bom/pom.xml b/bom/pom.xml
index 12c8528ac18..0224781687b 100644
--- a/bom/pom.xml
+++ b/bom/pom.xml
@@ -1492,7 +1492,7 @@ It is therefore a copy of org.apache:apache, with customisations clearly identif
 			<dependency>
 	            <groupId>com.sun.xml.bind</groupId>
 	            <artifactId>jaxb-impl</artifactId>
-	            <version>2.3.7</version> <!-- do not upgrade 2.x to 3.x or higher until Spring 6 -->
+	            <version>2.3.8</version> <!-- do not upgrade 2.x to 3.x or higher until Spring 6 -->
 	        </dependency>
 
 			<dependency>