diff --git a/pom.xml b/pom.xml
index 119a5c4b0e..7cdf411473 100644
--- a/pom.xml
+++ b/pom.xml
@@ -126,14 +126,14 @@
 		<cglib.version>3.2.12</cglib.version>
 		<commons-collections.version>3.2.2</commons-collections.version>
 		<commons-collections4.version>4.4</commons-collections4.version>
-		<commons-fileupload.version>1.5</commons-fileupload.version>
+		<commons-fileupload.version>1.6.0</commons-fileupload.version>
 		<commons-lang3.version>3.9</commons-lang3.version>
 		<jacoco.version>0.8.2</jacoco.version>
 		<jackson.version>2.9.9</jackson.version>
 		<jdk-serializable-functional.version>1.8.6</jdk-serializable-functional.version>
 		<jetty.version>9.4.18.v20190429</jetty.version>
 		<joda-time.version>2.10.1</joda-time.version>
-		<junit.version>4.12</junit.version>
+		<junit.version>4.13.2</junit.version>
 		<spring.version>4.3.22.RELEASE</spring.version>
 		<servlet-api.version>3.1.0</servlet-api.version>
 		<maven.javadoc.version>2.10.4</maven.javadoc.version>
@@ -248,7 +248,7 @@
 			<dependency>
 				<groupId>commons-io</groupId>
 				<artifactId>commons-io</artifactId>
-				<version>2.6</version>
+				<version>2.14.0</version>
 			</dependency>
 			<dependency>
 				<groupId>io.dropwizard.metrics</groupId>