diff --git a/pom.xml b/pom.xml
index 20801c6f0bf..06b842ab129 100644
--- a/pom.xml
+++ b/pom.xml
@@ -52,15 +52,15 @@
         <org.apache.xmlgraphics.version>2.8</org.apache.xmlgraphics.version>
         <org.apache.avalon.framework.version>4.3.1</org.apache.avalon.framework.version>
         <hamcrest.version>2.2-rc1</hamcrest.version>
-        <hibernate.version>5.6.10.Final</hibernate.version>
+        <hibernate.version>5.6.15.Final</hibernate.version>
         <jaxb.api.version>2.3.3</jaxb.api.version>
         <jaxb.glassfish-runtime.version>2.3.9</jaxb.glassfish-runtime.version>
         <jaxb2-basics-runtime.version>1.11.1</jaxb2-basics-runtime.version>
         <jaxen.version>1.2.0</jaxen.version>
         <jhove.version>1.20.1</jhove.version>
         <myfaces.version>2.3.10</myfaces.version>
-        <mysql.version>8.0.31</mysql.version>
-        <poi.version>5.2.2</poi.version>
+        <mysql.version>8.0.33</mysql.version>
+        <poi.version>5.2.5</poi.version>
         <primefaces.extensions.version>8.0.5</primefaces.extensions.version>
         <saxon.version>9.9.1-8</saxon.version>
         <log4j.version>2.19.0</log4j.version>
@@ -127,7 +127,7 @@
             <dependency>
                 <groupId>com.itextpdf</groupId>
                 <artifactId>itextpdf</artifactId>
-                <version>5.5.13.3</version>
+                <version>5.5.13.4</version>
             </dependency>
             <dependency>
                 <groupId>com.opencsv</groupId>
@@ -185,7 +185,7 @@
             <dependency>
                 <groupId>commons-logging</groupId>
                 <artifactId>commons-logging</artifactId>
-                <version>1.3.1</version>
+                <version>1.3.4</version>
             </dependency>
             <dependency>
                 <groupId>commons-net</groupId>
@@ -286,7 +286,7 @@ from system library in Java 11+ -->
             <dependency>
                 <groupId>org.apache.httpcomponents</groupId>
                 <artifactId>httpclient</artifactId>
-                <version>4.5.13</version>
+                <version>4.5.14</version>
             </dependency>
             <dependency>
                 <groupId>org.apache.logging.log4j</groupId>
@@ -332,7 +332,7 @@ from system library in Java 11+ -->
             <dependency>
                 <groupId>org.apache.pdfbox</groupId>
                 <artifactId>pdfbox</artifactId>
-                <version>3.0.0-RC1</version>
+                <version>3.0.3</version>
                 <scope>test</scope>
             </dependency>
             <dependency>
@@ -414,7 +414,7 @@ from system library in Java 11+ -->
             <dependency>
                 <groupId>org.bouncycastle</groupId>
                 <artifactId>bcprov-jdk18on</artifactId>
-                <version>1.78</version>
+                <version>1.78.1</version>
             </dependency>
             <dependency>
                 <groupId>org.camunda.bpm.model</groupId>
@@ -529,7 +529,7 @@ from system library in Java 11+ -->
             <dependency>
                 <groupId>org.hibernate.validator</groupId>
                 <artifactId>hibernate-validator</artifactId>
-                <version>6.2.4.Final</version>
+                <version>6.2.5.Final</version>
                 <exclusions>
                     <exclusion>
                         <groupId>org.jboss.logging</groupId>
@@ -633,7 +633,7 @@ from system library in Java 11+ -->
             <dependency>
                 <groupId>org.passay</groupId>
                 <artifactId>passay</artifactId>
-                <version>1.6.2</version>
+                <version>1.6.5</version>
             </dependency>
             <dependency>
                 <groupId>org.primefaces.extensions</groupId>
@@ -803,7 +803,7 @@ from system library in Java 11+ -->
             <dependency>
                 <groupId>org.xmlunit</groupId>
                 <artifactId>xmlunit-matchers</artifactId>
-                <version>2.9.0</version>
+                <version>2.9.1</version>
             </dependency>
             <dependency>
                 <groupId>se.jiderhamn.classloader-leak-prevention</groupId>