diff --git a/pom.xml b/pom.xml
index 291484dc..98a1a643 100644
--- a/pom.xml
+++ b/pom.xml
@@ -437,7 +437,7 @@
             <dependency>
                 <groupId>commons-io</groupId>
                 <artifactId>commons-io</artifactId>
-                <version>2.11.0</version>
+                <version>2.15.1</version>
             </dependency>
             <dependency>
                 <groupId>com.warrenstrange</groupId>
@@ -457,7 +457,7 @@
             <dependency>
                 <groupId>commons-codec</groupId>
                 <artifactId>commons-codec</artifactId>
-                <version>1.15</version>
+                <version>1.16.0</version>
             </dependency>
             <dependency>
                 <!--override googleauth's httpclient version-->
diff --git a/src/main/dependency-check/suppressions.xml b/src/main/dependency-check/suppressions.xml
index 90b5dea6..4c876109 100644
--- a/src/main/dependency-check/suppressions.xml
+++ b/src/main/dependency-check/suppressions.xml
@@ -143,6 +143,13 @@
         <sha1>3a3f6d8e593bce5624bfe0aa4a898bc1826d621a</sha1>
         <cve>CVE-2018-1258</cve>
     </suppress>
+    <suppress>
+        <notes><![CDATA[
+        file name: spring-security-config-5.5.8.jar
+        ]]></notes>
+        <sha1>0d718f457cba424663223fbd27e7704ceb9cfee4</sha1>
+        <cve>CVE-2018-1258</cve>
+    </suppress>