diff --git a/webgoat-lessons/pom.xml b/webgoat-lessons/pom.xml
index 9763c9b78..15cd2eb8a 100644
--- a/webgoat-lessons/pom.xml
+++ b/webgoat-lessons/pom.xml
@@ -94,7 +94,7 @@
         <dependency>
             <groupId>com.thoughtworks.xstream</groupId>
             <artifactId>xstream</artifactId>
-            <version>1.4.7</version>
+            <version>1.4.17</version>
         </dependency>
     </dependencies>
     <dependencyManagement>
diff --git a/webgoat-lessons/vulnerable-components/pom.xml b/webgoat-lessons/vulnerable-components/pom.xml
index a4dc8fd39..19da0d14d 100644
--- a/webgoat-lessons/vulnerable-components/pom.xml
+++ b/webgoat-lessons/vulnerable-components/pom.xml
@@ -12,7 +12,7 @@
         <dependency>
             <groupId>com.thoughtworks.xstream</groupId>
             <artifactId>xstream</artifactId>
-            <version>1.4.7</version>
+            <version>1.4.17</version>
         </dependency>
         <dependency>
             <groupId>cglib</groupId>