diff --git a/tika-parent/pom.xml b/tika-parent/pom.xml
index d8d80bd2eb..edc988cd57 100644
--- a/tika-parent/pom.xml
+++ b/tika-parent/pom.xml
@@ -337,20 +337,20 @@
     <poi.version>4.1.2</poi.version>
     <commons.compress.version>1.20</commons.compress.version>
     <commons.io.version>2.6</commons.io.version>
-    <commons.lang3.version>3.9</commons.lang3.version>
+    <commons.lang3.version>3.10</commons.lang3.version>
     <gson.version>2.8.6</gson.version>
     <guava.version>28.2-jre</guava.version>
     <osgi.core.version>6.0.0</osgi.core.version>
 
-    <cxf.version>3.3.5</cxf.version>
+    <cxf.version>3.3.6</cxf.version>
     <slf4j.version>1.7.28</slf4j.version>
     <jackson.version>2.10.3</jackson.version>
     <!-- when this is next upgraded, see if we can get rid of
          javax.activation dependency in tika-server -->
     <jaxb.version>2.3.2</jaxb.version>
     <cli.version>1.4</cli.version>
-    <lucene.version>8.4.1</lucene.version>
-    <mockito.version>3.3.0</mockito.version>
+    <lucene.version>8.5.0</lucene.version>
+    <mockito.version>3.3.3</mockito.version>
     <opennlp.version>1.9.2</opennlp.version>
   </properties>
 
diff --git a/tika-parsers/pom.xml b/tika-parsers/pom.xml
index 72fcc0ed0c..edd1aa38b5 100644
--- a/tika-parsers/pom.xml
+++ b/tika-parsers/pom.xml
@@ -53,7 +53,7 @@
     <sis.version>1.0</sis.version>
     <parso.version>2.0.11</parso.version>
     <!-- used by POI, PDFBox and Jackcess ...try to sync -->
-    <bouncycastle.version>1.64</bouncycastle.version>
+    <bouncycastle.version>1.65</bouncycastle.version>
     <commonsexec.version>1.3</commonsexec.version>
     <httpcomponents.version>4.5.12</httpcomponents.version>
   </properties>
@@ -182,7 +182,7 @@
     <dependency>
       <groupId>com.github.luben</groupId>
       <artifactId>zstd-jni</artifactId>
-      <version>1.4.4-7</version>
+      <version>1.4.4-9</version>
       <scope>provided</scope>
     </dependency>
 
@@ -319,7 +319,7 @@
     <dependency>
       <groupId>org.ow2.asm</groupId>
       <artifactId>asm</artifactId>
-      <version>7.3.1</version>
+      <version>8.0.1</version>
     </dependency>
     <dependency>
       <groupId>com.googlecode.mp4parser</groupId>
@@ -457,7 +457,7 @@
     <dependency>
       <groupId>com.github.openjson</groupId>
       <artifactId>openjson</artifactId>
-      <version>1.0.11</version>
+      <version>1.0.12</version>
     </dependency>
     <dependency>
       <groupId>com.google.code.gson</groupId>