diff --git a/CHANGELOG.md b/CHANGELOG.md
index 19749fd37..4c74a4404 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -9,6 +9,13 @@ All notable changes to this project will be documented in this file.
   - XsuaaServiceConfigurations#getConfigurations now contains ALL Xsuaa configurations found as a result of the previous change
   - HybridIdentityServicesAutoConfiguration was adjusted for backward compatibility to still create a JwtDecoder that uses the same XSUAA configurations as before for token validation (one of plan 'application' and an optional one of plan 'broker')
 
+#### Dependency upgrades
+- Bump spring.security.version from 5.8.7 to 5.8.8
+- Bump spring.boot.version from 2.7.16 to 2.7.17
+- Bump log4j2 from 2.20.0 to 2.21.1
+- Bump com.sap.cloud.environment.servicebinding from 0.10.0 to 0.10.1
+- Bump commons-io from 2.14.0 to 2.15.0
+
 ## 2.15.0
 - [java-security]
   - add x-azp header to IAS JWKS fetching and adjust JWKS cache key
diff --git a/pom.xml b/pom.xml
index 0379ce211..a8a35df71 100644
--- a/pom.xml
+++ b/pom.xml
@@ -57,22 +57,22 @@
 		<maven.compiler.source>1.8</maven.compiler.source>
 		<maven.source.plugin.version>3.2.1</maven.source.plugin.version>
 		<!-- make sure that spring core and spring boot versions are compatible-->
-		<spring.boot.version>2.7.16</spring.boot.version>
+		<spring.boot.version>2.7.17</spring.boot.version>
 		<spring.core.version>5.3.30</spring.core.version>
-		<spring.security.version>5.8.7</spring.security.version>
+		<spring.security.version>5.8.8</spring.security.version>
 		<spring.security.oauth2.version>2.5.2.RELEASE</spring.security.oauth2.version>
 		<spring.security.jwt.version>1.1.1.RELEASE</spring.security.jwt.version>
 		<reactor.version>3.4.33</reactor.version>
-		<log4j2.version>2.20.0</log4j2.version>
+		<log4j2.version>2.21.1</log4j2.version>
 		<slf4j.api.version>1.7.36</slf4j.api.version> <!--see also here http://www.slf4j.org/faq.html#changesInVersion18 -->
 		<org.json.version>20231013</org.json.version>
-		<sap.cloud.env.servicebinding.version>0.10.0</sap.cloud.env.servicebinding.version>
+		<sap.cloud.env.servicebinding.version>0.10.1</sap.cloud.env.servicebinding.version>
 		<apache.httpclient.version>4.5.14</apache.httpclient.version>
 		<caffeine.version>2.9.3</caffeine.version>
-		<commons.io.version>2.14.0</commons.io.version>
+		<commons.io.version>2.15.0</commons.io.version>
 		<javax.servlet.api.version>4.0.1</javax.servlet.api.version>
 		<junit.version>4.13.2</junit.version>
-		<junit-jupiter.version>5.9.3</junit-jupiter.version>
+		<junit-jupiter.version>5.10.1</junit-jupiter.version>
 		<maven-surefire-plugin>3.1.2</maven-surefire-plugin>
 		<hamcrest.version>1.3</hamcrest.version>
 		<mockito.version>4.11.0</mockito.version>