diff --git a/hot-framework/pom.xml b/hot-framework/pom.xml
index 433f621..1439cb3 100644
--- a/hot-framework/pom.xml
+++ b/hot-framework/pom.xml
@@ -450,7 +450,7 @@
 		<dependency>
 			<groupId>com.thoughtworks.xstream</groupId>
 			<artifactId>xstream</artifactId>
-			<version>1.4.9</version>
+			<version>1.4.18</version>
 		</dependency>
 		<dependency>
 			<groupId>javax.servlet</groupId>