diff --git a/pom.xml b/pom.xml
index 82f78b0d0..e0b0755d3 100644
--- a/pom.xml
+++ b/pom.xml
@@ -99,11 +99,11 @@
         <java.version>1.8</java.version>
 
         <!-- dependency versions in alphanumeric order -->
-        <asm.version>7.1</asm.version>
-        <jackson.version>2.10.0</jackson.version>
+        <asm.version>7.2</asm.version>
+        <jackson.version>2.10.1</jackson.version>
         <log4j2.version>2.12.1</log4j2.version>
         <ognl.version>3.2.10</ognl.version>
-        <slf4j.version>1.7.28</slf4j.version>
+        <slf4j.version>1.7.29</slf4j.version>
         <spring.platformVersion>4.3.25.RELEASE</spring.platformVersion>
         <tiles.version>3.0.8</tiles.version>
         <tiles-request.version>1.0.7</tiles-request.version>
@@ -113,7 +113,7 @@
 
         <!-- Sonar -->
         <sonar.host.url>https://builds.apache.org/analysis/</sonar.host.url>
-        <maven-surefire-plugin.version>2.22.1</maven-surefire-plugin.version>
+        <maven-surefire-plugin.version>2.22.2</maven-surefire-plugin.version>
     </properties>
 
     <profiles>
@@ -906,7 +906,7 @@
             <dependency>
                 <groupId>org.apache.commons</groupId>
                 <artifactId>commons-collections4</artifactId>
-                <version>4.2</version>
+                <version>4.4</version>
             </dependency>
             <!-- it's a dependency of Velocity defined here to override the transitive one -->
             <dependency>
@@ -927,12 +927,12 @@
             <dependency>
                 <groupId>org.apache.commons</groupId>
                 <artifactId>commons-lang3</artifactId>
-                <version>3.8.1</version>
+                <version>3.9</version>
             </dependency>
             <dependency>
                 <groupId>org.apache.commons</groupId>
                 <artifactId>commons-text</artifactId>
-                <version>1.3</version>
+                <version>1.8</version>
             </dependency>
             <dependency>
                 <groupId>commons-digester</groupId>