diff --git a/pom.xml b/pom.xml
index 388bae932..91bb03a3e 100644
--- a/pom.xml
+++ b/pom.xml
@@ -198,7 +198,7 @@
   <properties>
     <project.build.sourceEncoding>UTF-8</project.build.sourceEncoding>
     <spring.version>5.1.16.RELEASE</spring.version>
-    <spring-security.version>5.1.10.RELEASE</spring-security.version>
+    <spring-security.version>5.3.3.RELEASE</spring-security.version>
     <!-- seems to break CAS login:
      <spring.version>5.2.0.RELEASE</spring.version>
      <spring-security.version>5.2.0.RELEASE</spring-security.version>