diff --git a/java/ql/integration-tests/java/buildless-maven-executable-war/pom.xml b/java/ql/integration-tests/java/buildless-maven-executable-war/pom.xml
index c8edf00dc00..d6cef89f261 100644
--- a/java/ql/integration-tests/java/buildless-maven-executable-war/pom.xml
+++ b/java/ql/integration-tests/java/buildless-maven-executable-war/pom.xml
@@ -38,7 +38,7 @@
     <dependency>
       <groupId>junit</groupId>
       <artifactId>junit</artifactId>
-      <version>4.11</version>
+      <version>4.13.1</version>
       <scope>test</scope>
     </dependency>
     <dependency>
diff --git a/java/ql/integration-tests/java/buildless-maven-existing-settings-xml/pom.xml b/java/ql/integration-tests/java/buildless-maven-existing-settings-xml/pom.xml
index debe59e6c03..3d5efb4d389 100644
--- a/java/ql/integration-tests/java/buildless-maven-existing-settings-xml/pom.xml
+++ b/java/ql/integration-tests/java/buildless-maven-existing-settings-xml/pom.xml
@@ -21,7 +21,7 @@
     <dependency>
       <groupId>junit</groupId>
       <artifactId>junit</artifactId>
-      <version>4.11</version>
+      <version>4.13.1</version>
       <scope>test</scope>
     </dependency>
   </dependencies>
diff --git a/java/ql/integration-tests/java/buildless-maven-mirrorof/pom.xml b/java/ql/integration-tests/java/buildless-maven-mirrorof/pom.xml
index debe59e6c03..3d5efb4d389 100644
--- a/java/ql/integration-tests/java/buildless-maven-mirrorof/pom.xml
+++ b/java/ql/integration-tests/java/buildless-maven-mirrorof/pom.xml
@@ -21,7 +21,7 @@
     <dependency>
       <groupId>junit</groupId>
       <artifactId>junit</artifactId>
-      <version>4.11</version>
+      <version>4.13.1</version>
       <scope>test</scope>
     </dependency>
   </dependencies>
diff --git a/java/ql/integration-tests/java/buildless-maven-multimodule/pom.xml b/java/ql/integration-tests/java/buildless-maven-multimodule/pom.xml
index 2f153686186..3d566cb2b6b 100644
--- a/java/ql/integration-tests/java/buildless-maven-multimodule/pom.xml
+++ b/java/ql/integration-tests/java/buildless-maven-multimodule/pom.xml
@@ -21,7 +21,7 @@
     <dependency>
       <groupId>junit</groupId>
       <artifactId>junit</artifactId>
-      <version>4.11</version>
+      <version>4.13.1</version>
       <scope>test</scope>
     </dependency>
   </dependencies>
diff --git a/java/ql/integration-tests/java/buildless-maven-multimodule/submod2/pom.xml b/java/ql/integration-tests/java/buildless-maven-multimodule/submod2/pom.xml
index 8cd8c620adc..6c61b422a5b 100644
--- a/java/ql/integration-tests/java/buildless-maven-multimodule/submod2/pom.xml
+++ b/java/ql/integration-tests/java/buildless-maven-multimodule/submod2/pom.xml
@@ -45,7 +45,7 @@
     <dependency>
       <groupId>org.apache.commons</groupId>
       <artifactId>commons-lang3</artifactId>
-      <version>3.14.0</version>
+      <version>3.18.0</version>
     </dependency>
 
   </dependencies>
diff --git a/java/ql/integration-tests/java/buildless-maven-timeout/pom.xml b/java/ql/integration-tests/java/buildless-maven-timeout/pom.xml
index ec4aaf128c1..4dfba5373db 100644
--- a/java/ql/integration-tests/java/buildless-maven-timeout/pom.xml
+++ b/java/ql/integration-tests/java/buildless-maven-timeout/pom.xml
@@ -21,7 +21,7 @@
     <dependency>
       <groupId>junit</groupId>
       <artifactId>junit</artifactId>
-      <version>4.11</version>
+      <version>4.13.1</version>
       <scope>test</scope>
     </dependency>
   </dependencies>
diff --git a/java/ql/integration-tests/java/buildless-maven/pom.xml b/java/ql/integration-tests/java/buildless-maven/pom.xml
index debe59e6c03..3d5efb4d389 100644
--- a/java/ql/integration-tests/java/buildless-maven/pom.xml
+++ b/java/ql/integration-tests/java/buildless-maven/pom.xml
@@ -21,7 +21,7 @@
     <dependency>
       <groupId>junit</groupId>
       <artifactId>junit</artifactId>
-      <version>4.11</version>
+      <version>4.13.1</version>
       <scope>test</scope>
     </dependency>
   </dependencies>
diff --git a/java/ql/integration-tests/java/buildless-proxy-maven/pom.xml b/java/ql/integration-tests/java/buildless-proxy-maven/pom.xml
index ec4aaf128c1..4dfba5373db 100644
--- a/java/ql/integration-tests/java/buildless-proxy-maven/pom.xml
+++ b/java/ql/integration-tests/java/buildless-proxy-maven/pom.xml
@@ -21,7 +21,7 @@
     <dependency>
       <groupId>junit</groupId>
       <artifactId>junit</artifactId>
-      <version>4.11</version>
+      <version>4.13.1</version>
       <scope>test</scope>
     </dependency>
   </dependencies>
diff --git a/java/ql/integration-tests/java/buildless-sibling-projects/maven-project-1/pom.xml b/java/ql/integration-tests/java/buildless-sibling-projects/maven-project-1/pom.xml
index 4d7ab25823a..1f14ceaf7f0 100644
--- a/java/ql/integration-tests/java/buildless-sibling-projects/maven-project-1/pom.xml
+++ b/java/ql/integration-tests/java/buildless-sibling-projects/maven-project-1/pom.xml
@@ -21,7 +21,7 @@
     <dependency>
       <groupId>junit</groupId>
       <artifactId>junit</artifactId>
-      <version>4.11</version>
+      <version>4.13.1</version>
       <scope>test</scope>
     </dependency>
   </dependencies>
diff --git a/java/ql/integration-tests/java/buildless-sibling-projects/maven-project-2/pom.xml b/java/ql/integration-tests/java/buildless-sibling-projects/maven-project-2/pom.xml
index 0cfb4b8542c..3ee4cf39ffb 100644
--- a/java/ql/integration-tests/java/buildless-sibling-projects/maven-project-2/pom.xml
+++ b/java/ql/integration-tests/java/buildless-sibling-projects/maven-project-2/pom.xml
@@ -21,7 +21,7 @@
     <dependency>
       <groupId>junit</groupId>
       <artifactId>junit</artifactId>
-      <version>4.12</version>
+      <version>4.13.1</version>
       <scope>test</scope>
     </dependency>
   </dependencies>
diff --git a/java/ql/integration-tests/java/diagnostics/compilation-error/pom.xml b/java/ql/integration-tests/java/diagnostics/compilation-error/pom.xml
index ec4aaf128c1..4dfba5373db 100644
--- a/java/ql/integration-tests/java/diagnostics/compilation-error/pom.xml
+++ b/java/ql/integration-tests/java/diagnostics/compilation-error/pom.xml
@@ -21,7 +21,7 @@
     <dependency>
       <groupId>junit</groupId>
       <artifactId>junit</artifactId>
-      <version>4.11</version>
+      <version>4.13.1</version>
       <scope>test</scope>
     </dependency>
   </dependencies>
diff --git a/java/ql/integration-tests/java/diagnostics/multiple-candidate-builds/maven-project-1/pom.xml b/java/ql/integration-tests/java/diagnostics/multiple-candidate-builds/maven-project-1/pom.xml
index ec4aaf128c1..4dfba5373db 100644
--- a/java/ql/integration-tests/java/diagnostics/multiple-candidate-builds/maven-project-1/pom.xml
+++ b/java/ql/integration-tests/java/diagnostics/multiple-candidate-builds/maven-project-1/pom.xml
@@ -21,7 +21,7 @@
     <dependency>
       <groupId>junit</groupId>
       <artifactId>junit</artifactId>
-      <version>4.11</version>
+      <version>4.13.1</version>
       <scope>test</scope>
     </dependency>
   </dependencies>
diff --git a/java/ql/integration-tests/java/diagnostics/multiple-candidate-builds/maven-project-2/pom.xml b/java/ql/integration-tests/java/diagnostics/multiple-candidate-builds/maven-project-2/pom.xml
index ec4aaf128c1..4dfba5373db 100644
--- a/java/ql/integration-tests/java/diagnostics/multiple-candidate-builds/maven-project-2/pom.xml
+++ b/java/ql/integration-tests/java/diagnostics/multiple-candidate-builds/maven-project-2/pom.xml
@@ -21,7 +21,7 @@
     <dependency>
       <groupId>junit</groupId>
       <artifactId>junit</artifactId>
-      <version>4.11</version>
+      <version>4.13.1</version>
       <scope>test</scope>
     </dependency>
   </dependencies>
diff --git a/java/ql/integration-tests/java/maven-download-failure/pom.xml b/java/ql/integration-tests/java/maven-download-failure/pom.xml
index ca376ad5ba9..76e3264a785 100644
--- a/java/ql/integration-tests/java/maven-download-failure/pom.xml
+++ b/java/ql/integration-tests/java/maven-download-failure/pom.xml
@@ -21,7 +21,7 @@
     <dependency>
       <groupId>junit</groupId>
       <artifactId>junit</artifactId>
-      <version>4.11</version>
+      <version>4.13.1</version>
       <scope>test</scope>
     </dependency>
   </dependencies>
diff --git a/java/ql/integration-tests/java/maven-enforcer-multiple-versions/pom.xml b/java/ql/integration-tests/java/maven-enforcer-multiple-versions/pom.xml
index becb322222e..63f2fd38c05 100644
--- a/java/ql/integration-tests/java/maven-enforcer-multiple-versions/pom.xml
+++ b/java/ql/integration-tests/java/maven-enforcer-multiple-versions/pom.xml
@@ -21,7 +21,7 @@
     <dependency>
       <groupId>junit</groupId>
       <artifactId>junit</artifactId>
-      <version>4.11</version>
+      <version>4.13.1</version>
       <scope>test</scope>
     </dependency>
   </dependencies>
diff --git a/java/ql/integration-tests/java/maven-enforcer-single-version/pom.xml b/java/ql/integration-tests/java/maven-enforcer-single-version/pom.xml
index c13e7b6a0f3..3c3e04faa64 100644
--- a/java/ql/integration-tests/java/maven-enforcer-single-version/pom.xml
+++ b/java/ql/integration-tests/java/maven-enforcer-single-version/pom.xml
@@ -21,7 +21,7 @@
     <dependency>
       <groupId>junit</groupId>
       <artifactId>junit</artifactId>
-      <version>4.11</version>
+      <version>4.13.1</version>
       <scope>test</scope>
     </dependency>
   </dependencies>
diff --git a/java/ql/integration-tests/java/maven-enforcer/pom.xml b/java/ql/integration-tests/java/maven-enforcer/pom.xml
index 1a1ec409b72..c574ab7ce52 100644
--- a/java/ql/integration-tests/java/maven-enforcer/pom.xml
+++ b/java/ql/integration-tests/java/maven-enforcer/pom.xml
@@ -21,7 +21,7 @@
     <dependency>
       <groupId>junit</groupId>
       <artifactId>junit</artifactId>
-      <version>4.11</version>
+      <version>4.13.1</version>
       <scope>test</scope>
     </dependency>
   </dependencies>
diff --git a/java/ql/integration-tests/java/maven-sample-extract-properties/pom.xml b/java/ql/integration-tests/java/maven-sample-extract-properties/pom.xml
index ec4aaf128c1..4dfba5373db 100644
--- a/java/ql/integration-tests/java/maven-sample-extract-properties/pom.xml
+++ b/java/ql/integration-tests/java/maven-sample-extract-properties/pom.xml
@@ -21,7 +21,7 @@
     <dependency>
       <groupId>junit</groupId>
       <artifactId>junit</artifactId>
-      <version>4.11</version>
+      <version>4.13.1</version>
       <scope>test</scope>
     </dependency>
   </dependencies>
diff --git a/java/ql/integration-tests/java/maven-sample-large-xml-files/pom.xml b/java/ql/integration-tests/java/maven-sample-large-xml-files/pom.xml
index ec4aaf128c1..4dfba5373db 100644
--- a/java/ql/integration-tests/java/maven-sample-large-xml-files/pom.xml
+++ b/java/ql/integration-tests/java/maven-sample-large-xml-files/pom.xml
@@ -21,7 +21,7 @@
     <dependency>
       <groupId>junit</groupId>
       <artifactId>junit</artifactId>
-      <version>4.11</version>
+      <version>4.13.1</version>
       <scope>test</scope>
     </dependency>
   </dependencies>
diff --git a/java/ql/integration-tests/java/maven-sample-small-xml-files/pom.xml b/java/ql/integration-tests/java/maven-sample-small-xml-files/pom.xml
index ec4aaf128c1..4dfba5373db 100644
--- a/java/ql/integration-tests/java/maven-sample-small-xml-files/pom.xml
+++ b/java/ql/integration-tests/java/maven-sample-small-xml-files/pom.xml
@@ -21,7 +21,7 @@
     <dependency>
       <groupId>junit</groupId>
       <artifactId>junit</artifactId>
-      <version>4.11</version>
+      <version>4.13.1</version>
       <scope>test</scope>
     </dependency>
   </dependencies>
diff --git a/java/ql/integration-tests/java/maven-sample-xml-mode-all-gbk-encoding/pom.xml b/java/ql/integration-tests/java/maven-sample-xml-mode-all-gbk-encoding/pom.xml
index ec4aaf128c1..4dfba5373db 100644
--- a/java/ql/integration-tests/java/maven-sample-xml-mode-all-gbk-encoding/pom.xml
+++ b/java/ql/integration-tests/java/maven-sample-xml-mode-all-gbk-encoding/pom.xml
@@ -21,7 +21,7 @@
     <dependency>
       <groupId>junit</groupId>
       <artifactId>junit</artifactId>
-      <version>4.11</version>
+      <version>4.13.1</version>
       <scope>test</scope>
     </dependency>
   </dependencies>
diff --git a/java/ql/integration-tests/java/maven-sample-xml-mode-all/pom.xml b/java/ql/integration-tests/java/maven-sample-xml-mode-all/pom.xml
index ec4aaf128c1..4dfba5373db 100644
--- a/java/ql/integration-tests/java/maven-sample-xml-mode-all/pom.xml
+++ b/java/ql/integration-tests/java/maven-sample-xml-mode-all/pom.xml
@@ -21,7 +21,7 @@
     <dependency>
       <groupId>junit</groupId>
       <artifactId>junit</artifactId>
-      <version>4.11</version>
+      <version>4.13.1</version>
       <scope>test</scope>
     </dependency>
   </dependencies>
diff --git a/java/ql/integration-tests/java/maven-sample-xml-mode-byname/pom.xml b/java/ql/integration-tests/java/maven-sample-xml-mode-byname/pom.xml
index ec4aaf128c1..4dfba5373db 100644
--- a/java/ql/integration-tests/java/maven-sample-xml-mode-byname/pom.xml
+++ b/java/ql/integration-tests/java/maven-sample-xml-mode-byname/pom.xml
@@ -21,7 +21,7 @@
     <dependency>
       <groupId>junit</groupId>
       <artifactId>junit</artifactId>
-      <version>4.11</version>
+      <version>4.13.1</version>
       <scope>test</scope>
     </dependency>
   </dependencies>
diff --git a/java/ql/integration-tests/java/maven-sample-xml-mode-disabled/pom.xml b/java/ql/integration-tests/java/maven-sample-xml-mode-disabled/pom.xml
index ec4aaf128c1..4dfba5373db 100644
--- a/java/ql/integration-tests/java/maven-sample-xml-mode-disabled/pom.xml
+++ b/java/ql/integration-tests/java/maven-sample-xml-mode-disabled/pom.xml
@@ -21,7 +21,7 @@
     <dependency>
       <groupId>junit</groupId>
       <artifactId>junit</artifactId>
-      <version>4.11</version>
+      <version>4.13.1</version>
       <scope>test</scope>
     </dependency>
   </dependencies>
diff --git a/java/ql/integration-tests/java/maven-sample-xml-mode-smart/pom.xml b/java/ql/integration-tests/java/maven-sample-xml-mode-smart/pom.xml
index ec4aaf128c1..4dfba5373db 100644
--- a/java/ql/integration-tests/java/maven-sample-xml-mode-smart/pom.xml
+++ b/java/ql/integration-tests/java/maven-sample-xml-mode-smart/pom.xml
@@ -21,7 +21,7 @@
     <dependency>
       <groupId>junit</groupId>
       <artifactId>junit</artifactId>
-      <version>4.11</version>
+      <version>4.13.1</version>
       <scope>test</scope>
     </dependency>
   </dependencies>
diff --git a/java/ql/integration-tests/java/maven-sample/pom.xml b/java/ql/integration-tests/java/maven-sample/pom.xml
index ec4aaf128c1..4dfba5373db 100644
--- a/java/ql/integration-tests/java/maven-sample/pom.xml
+++ b/java/ql/integration-tests/java/maven-sample/pom.xml
@@ -21,7 +21,7 @@
     <dependency>
       <groupId>junit</groupId>
       <artifactId>junit</artifactId>
-      <version>4.11</version>
+      <version>4.13.1</version>
       <scope>test</scope>
     </dependency>
   </dependencies>
diff --git a/java/ql/integration-tests/java/maven-wrapper-script-only/pom.xml b/java/ql/integration-tests/java/maven-wrapper-script-only/pom.xml
index ec4aaf128c1..4dfba5373db 100644
--- a/java/ql/integration-tests/java/maven-wrapper-script-only/pom.xml
+++ b/java/ql/integration-tests/java/maven-wrapper-script-only/pom.xml
@@ -21,7 +21,7 @@
     <dependency>
       <groupId>junit</groupId>
       <artifactId>junit</artifactId>
-      <version>4.11</version>
+      <version>4.13.1</version>
       <scope>test</scope>
     </dependency>
   </dependencies>
diff --git a/java/ql/integration-tests/java/maven-wrapper-source-only/pom.xml b/java/ql/integration-tests/java/maven-wrapper-source-only/pom.xml
index ec4aaf128c1..4dfba5373db 100644
--- a/java/ql/integration-tests/java/maven-wrapper-source-only/pom.xml
+++ b/java/ql/integration-tests/java/maven-wrapper-source-only/pom.xml
@@ -21,7 +21,7 @@
     <dependency>
       <groupId>junit</groupId>
       <artifactId>junit</artifactId>
-      <version>4.11</version>
+      <version>4.13.1</version>
       <scope>test</scope>
     </dependency>
   </dependencies>
diff --git a/java/ql/integration-tests/java/maven-wrapper/pom.xml b/java/ql/integration-tests/java/maven-wrapper/pom.xml
index ec4aaf128c1..4dfba5373db 100644
--- a/java/ql/integration-tests/java/maven-wrapper/pom.xml
+++ b/java/ql/integration-tests/java/maven-wrapper/pom.xml
@@ -21,7 +21,7 @@
     <dependency>
       <groupId>junit</groupId>
       <artifactId>junit</artifactId>
-      <version>4.11</version>
+      <version>4.13.1</version>
       <scope>test</scope>
     </dependency>
   </dependencies>
diff --git a/java/ql/test/utils/flowtestcasegenerator/pom.xml b/java/ql/test/utils/flowtestcasegenerator/pom.xml
index b4fe0c30974..366d4d64424 100644
--- a/java/ql/test/utils/flowtestcasegenerator/pom.xml
+++ b/java/ql/test/utils/flowtestcasegenerator/pom.xml
@@ -26,7 +26,7 @@
     <dependency>
       <groupId>org.apache.logging.log4j</groupId>
       <artifactId>log4j-core</artifactId>
-      <version>2.14.1</version>
+      <version>2.25.4</version>
     </dependency>
     <dependency>
       <groupId>org.slf4j</groupId>
@@ -47,22 +47,22 @@
     <dependency>
       <groupId>org.springframework.ldap</groupId>
       <artifactId>spring-ldap-core</artifactId>
-      <version>2.3.5.RELEASE</version>
+      <version>2.4.4</version>
     </dependency>
     <dependency>
       <groupId>org.springframework</groupId>
       <artifactId>spring-web</artifactId>
-      <version>5.3.18</version>
+      <version>6.1.21</version>
     </dependency>
     <dependency>
       <groupId>org.springframework</groupId>
       <artifactId>spring-context</artifactId>
-      <version>5.3.18</version>
+      <version>6.1.20</version>
     </dependency>
     <dependency>
       <groupId>org.springframework</groupId>
       <artifactId>spring-webmvc</artifactId>
-      <version>5.3.18</version>
+      <version>6.2.18</version>
     </dependency>
     <dependency>
       <groupId>org.springframework.data</groupId>
@@ -72,7 +72,7 @@
     <dependency>
       <groupId>org.apache.shiro</groupId>
       <artifactId>shiro-core</artifactId>
-      <version>1.8.0</version>
+      <version>2.2.1</version>
     </dependency>
     <dependency>
       <groupId>org.apache.directory.api</groupId>
@@ -82,7 +82,7 @@
     <dependency>
       <groupId>org.owasp.esapi</groupId>
       <artifactId>esapi</artifactId>
-      <version>2.2.3.1</version>
+      <version>2.6.0.0</version>
     </dependency>
     <dependency>
       <groupId>com.unboundid</groupId>
@@ -112,12 +112,12 @@
     <dependency>
         <groupId>org.thymeleaf</groupId>
         <artifactId>thymeleaf</artifactId>
-        <version>3.0.15.RELEASE</version>
+        <version>3.1.5.RELEASE</version>
     </dependency>
     <dependency>
         <groupId>com.hubspot.jinjava</groupId>
         <artifactId>jinjava</artifactId>
-        <version>2.6.0</version>
+        <version>2.7.6</version>
     </dependency>
     <dependency>
         <groupId>io.pebbletemplates</groupId>