diff --git a/build.gradle b/build.gradle
index 8b43df8aa67b..b651148ade81 100644
--- a/build.gradle
+++ b/build.gradle
@@ -33,7 +33,7 @@ ext {
 	groovyVersion        = "2.5.8"
 	hsqldbVersion        = "2.4.1"
 	jackson2Version      = "2.9.9"
-	jettyVersion         = "9.4.21.v20190926"
+	jettyVersion         = "9.4.23.v20191118"
 	junit5Version        = "5.3.2"
 	kotlinVersion        = "1.2.71"
 	log4jVersion         = "2.11.2"
diff --git a/spring-core/spring-core.gradle b/spring-core/spring-core.gradle
index bda90aad8276..aaf884b1bf29 100644
--- a/spring-core/spring-core.gradle
+++ b/spring-core/spring-core.gradle
@@ -83,7 +83,7 @@ dependencies {
 	testCompile("com.google.code.findbugs:jsr305:3.0.2")
 	testCompile("org.xmlunit:xmlunit-matchers:2.6.2")
 	testCompile("javax.xml.bind:jaxb-api:2.3.1")
-	testCompile("com.fasterxml.woodstox:woodstox-core:5.2.0") {
+	testCompile("com.fasterxml.woodstox:woodstox-core:5.3.0") {
 		exclude group: "stax", module: "stax-api"
 	}
 }
diff --git a/spring-web/spring-web.gradle b/spring-web/spring-web.gradle
index 390f697127d9..d735f4a333e2 100644
--- a/spring-web/spring-web.gradle
+++ b/spring-web/spring-web.gradle
@@ -47,7 +47,7 @@ dependencies {
 	}
 	optional("commons-fileupload:commons-fileupload:1.4")
 	optional("org.synchronoss.cloud:nio-multipart-parser:1.1.0")
-	optional("com.fasterxml.woodstox:woodstox-core:5.2.0") {  // woodstox before aalto
+	optional("com.fasterxml.woodstox:woodstox-core:5.3.0") {  // woodstox before aalto
 		exclude group: "stax", module: "stax-api"
 	}
 	optional("com.fasterxml:aalto-xml:1.1.1")