diff --git a/spring-web-modules/spring-rest-http/pom.xml b/spring-web-modules/spring-rest-http/pom.xml
index 5a92b585e3ab..92a5a8fbbb00 100644
--- a/spring-web-modules/spring-rest-http/pom.xml
+++ b/spring-web-modules/spring-rest-http/pom.xml
@@ -57,8 +57,8 @@
     </dependencies>
 
     <properties>
-        <xstream.version>1.4.9</xstream.version>
+        <xstream.version>1.4.20</xstream.version>
         <jsonpatch.version>1.12</jsonpatch.version>
     </properties>
 
-</project>
\ No newline at end of file
+</project>