diff --git a/pom.xml b/pom.xml
index 39385bf40..12bded7c8 100644
--- a/pom.xml
+++ b/pom.xml
@@ -244,7 +244,7 @@
     <skipITs>true</skipITs>
 
     <spring.version>5.1.16.RELEASE</spring.version>
-    <spring-security.version>5.3.3.RELEASE</spring-security.version>
+    <spring-security.version>5.4.4</spring-security.version>
     <!-- seems to break CAS login:
      <spring.version>5.2.0.RELEASE</spring.version>
      <spring-security.version>5.2.0.RELEASE</spring-security.version>