diff --git a/src/pom.xml b/src/pom.xml
index 5afaa8bb..07062cd4 100644
--- a/src/pom.xml
+++ b/src/pom.xml
@@ -74,7 +74,7 @@
         spring-security-core 3.0.4 requires spring-core 3.x, otherwise we'd normally use 2.5.6, which
         is what the rest of the app uses
         -->
-        <spring-version>5.3.9</spring-version>
+        <spring-version>5.3.18</spring-version>
 
         <!-- 2.5.6.SEC01 is the version used by smix-->
         <!-- 2.5.5       is the version used by memberService-->
@@ -536,6 +536,14 @@
 		    <!-- =========================================================== -->
 		    <!--     SPRING                                                  -->
 		    <!-- =========================================================== -->
+            <dependency>
+                <groupId>org.springframework</groupId>
+                <artifactId>spring-framework-bom</artifactId>
+                <version>${spring-version}</version>
+                <type>pom</type>
+                <scope>import</scope>
+            </dependency>
+
             <dependency>
                 <groupId>org.springframework</groupId>
                 <artifactId>spring-core</artifactId>