diff --git a/File-Integrity-Scanner/pom.xml b/File-Integrity-Scanner/pom.xml
index ca40466..fa0c98e 100644
--- a/File-Integrity-Scanner/pom.xml
+++ b/File-Integrity-Scanner/pom.xml
@@ -44,6 +44,7 @@
         <project.build.sourceEncoding>UTF-8</project.build.sourceEncoding>
         <spring-boot.version>4.0.6</spring-boot.version>
         <postgresql.JDBC-Driver.version>42.7.11</postgresql.JDBC-Driver.version>
+        <tomcat.version>11.0.22</tomcat.version>
     </properties>
 
 
@@ -170,20 +171,40 @@
 
     </dependencies>
 
-    <dependencyManagement>
-    <dependencies>
-        <!-- Make sure all Spring Boot components are using the same version -->
-        <dependency>
-            <groupId>org.springframework.boot</groupId>
-            <artifactId>spring-boot-dependencies</artifactId>
-            <version>${spring-boot.version}</version>
-            <type>pom</type>
-            <scope>import</scope>
-        </dependency>
-    </dependencies>
+<dependencyManagement>
+  <dependencies>
+
+    <!-- Spring Boot BOM -->
+    <dependency>
+      <groupId>org.springframework.boot</groupId>
+      <artifactId>spring-boot-dependencies</artifactId>
+      <version>${spring-boot.version}</version>
+      <type>pom</type>
+      <scope>import</scope>
+    </dependency>
+
+    <!-- Force patched Tomcat (fixes Snyk CVEs) -->
+    <dependency>
+      <groupId>org.apache.tomcat.embed</groupId>
+      <artifactId>tomcat-embed-core</artifactId>
+      <version>11.0.22</version>
+    </dependency>
+
+    <dependency>
+      <groupId>org.apache.tomcat.embed</groupId>
+      <artifactId>tomcat-embed-websocket</artifactId>
+      <version>11.0.22</version>
+    </dependency>
+
+    <dependency>
+      <groupId>org.apache.tomcat.embed</groupId>
+      <artifactId>tomcat-embed-el</artifactId>
+      <version>11.0.22</version>
+    </dependency>
+
+  </dependencies>
 </dependencyManagement>
 
-
     <build>
         <plugins>
             <!--