diff --git a/pom.xml b/pom.xml
index 210daa8d642..56ea90d6065 100644
--- a/pom.xml
+++ b/pom.xml
@@ -5,7 +5,7 @@
   <parent>
     <groupId>org.springframework.boot</groupId>
     <artifactId>spring-boot-starter-parent</artifactId>
-    <version>3.5.6</version>
+    <version>3.5.16</version>
   </parent>
 
   <groupId>org.owasp.webgoat</groupId>
@@ -73,6 +73,7 @@
     <commons-lang3.version>3.14.0</commons-lang3.version>
     <commons-text.version>1.14.0</commons-text.version>
     <guava.version>33.5.0-jre</guava.version>
+    <jackson-bom.version>2.21.5</jackson-bom.version>
     <jacoco.version>0.8.11</jacoco.version>
     <java.version>25</java.version>
     <jaxb.version>2.3.1</jaxb.version>
@@ -94,7 +95,6 @@
     <!-- Use UTF-8 Encoding -->
     <project.build.sourceEncoding>UTF-8</project.build.sourceEncoding>
     <project.reporting.outputEncoding>UTF-8</project.reporting.outputEncoding>
-    <thymeleaf.version>3.1.2.RELEASE</thymeleaf.version>
     <waittimeForServerStart>60</waittimeForServerStart>
     <webdriver.version>6.3.2</webdriver.version>
     <webgoat.context>/WebGoat</webgoat.context>
@@ -105,7 +105,7 @@
     <webwolf.port>9090</webwolf.port>
     <wiremock.version>3.13.1</wiremock.version>
     <xml-resolver.version>1.2</xml-resolver.version>
-    <xstream.version>1.4.5</xstream.version>
+    <xstream.version>1.4.20</xstream.version>
     <!-- do not update necessary for lesson -->
     <zxcvbn.version>1.9.0</zxcvbn.version>
   </properties>