diff --git a/javaee-legacy-app/pom.xml b/javaee-legacy-app/pom.xml
index 4faafc9..84edfee 100644
--- a/javaee-legacy-app/pom.xml
+++ b/javaee-legacy-app/pom.xml
@@ -72,7 +72,7 @@
         <dependency>
             <groupId>commons-fileupload</groupId>
             <artifactId>commons-fileupload</artifactId>
-            <version>1.3.1</version>
+            <version>1.6.0</version>
         </dependency>
 
         <!-- Apache Commons IO 2.4 - CVE-2021-29425 (path traversal) -->