diff --git a/airsonic-main/pom.xml b/airsonic-main/pom.xml
index 1f3bf3646..58ceab77b 100644
--- a/airsonic-main/pom.xml
+++ b/airsonic-main/pom.xml
@@ -17,7 +17,7 @@
         <chameleon.version>2.0.0-RELEASE</chameleon.version>
         <tomcat.server.scope>provided</tomcat.server.scope>
         <!-- For fixing import/export due to https://github.com/liquibase/liquibase/issues/1598 -->
-        <liquibase.version>4.29.1</liquibase.version>
+        <liquibase.version>4.29.2</liquibase.version>
         <logback.version>1.5.8</logback.version>
         <mockito.version>5.12.0</mockito.version>
         <mariadb.version>3.3.2</mariadb.version>
@@ -40,7 +40,7 @@
         <dependency>
             <groupId>org.yaml</groupId>
             <artifactId>snakeyaml</artifactId>
-            <version>2.2</version>
+            <version>2.3</version>
         </dependency>
         <!-- Metrics
              Metrics is a cool framework used here
diff --git a/pom.xml b/pom.xml
index 7ff156bc7..9339177d4 100644
--- a/pom.xml
+++ b/pom.xml
@@ -26,7 +26,7 @@
         <project.build.sourceEncoding>UTF-8</project.build.sourceEncoding>
         <java.version>17</java.version>
         <cxf.version>4.0.5</cxf.version>
-        <snakeyaml.version>2.2</snakeyaml.version>
+        <snakeyaml.version>2.3</snakeyaml.version>
         <lucene.version>9.11.1</lucene.version>
         <docker.container.repo>ghcr.io/kagemomiji/airsonic-advanced</docker.container.repo>
         <docker.java.version>17.0.10_7</docker.java.version>
@@ -91,7 +91,7 @@
          <dependency>
                 <groupId>org.apache.commons</groupId>
                 <artifactId>commons-lang3</artifactId>
-                <version>3.14.0</version>
+                <version>3.16.0</version>
             </dependency>
                <dependency>
                 <groupId>org.seamless</groupId>
@@ -285,7 +285,7 @@
                 <plugin>
                     <groupId>org.owasp</groupId>
                     <artifactId>dependency-check-maven</artifactId>
-                    <version>10.0.3</version>
+                    <version>10.0.4</version>
                     <inherited>true</inherited>
                     <configuration>
                         <cveValidForHours>24</cveValidForHours>