diff --git a/pom.xml b/pom.xml
index 05bef49..526ff23 100644
--- a/pom.xml
+++ b/pom.xml
@@ -38,7 +38,7 @@
         <dependency> <!-- commons-fileupload is needed for CVE-2013-2186 -->
             <groupId>commons-fileupload</groupId>
             <artifactId>commons-fileupload</artifactId>
-            <version>1.3</version>
+            <version>1.3.3</version>
         </dependency>
         <dependency>
             <groupId>junit</groupId>