diff --git a/archived/threadfix-sonar-plugin/pom.xml b/archived/threadfix-sonar-plugin/pom.xml
index 53b1ebc5ff..fa4bb98f97 100644
--- a/archived/threadfix-sonar-plugin/pom.xml
+++ b/archived/threadfix-sonar-plugin/pom.xml
@@ -151,7 +151,7 @@
         <!-- This means we must use a compatible version of hibernate -->
         <hibernate.version>3.3.2.GA</hibernate.version>
         <!-- Unfortunately Spring 4 only supports hibernate 3.6+. This is the most recent 3.x release -->
-        <spring.version>3.2.13.RELEASE</spring.version>
+        <spring.version>5.2.20.RELEASE</spring.version>
     </properties>
 
     <modelVersion>4.0.0</modelVersion>