diff --git a/backend/build.gradle b/backend/build.gradle
index 0a2bee909a..7317173843 100644
--- a/backend/build.gradle
+++ b/backend/build.gradle
@@ -76,7 +76,7 @@ dependencies {
     implementation 'org.springframework.security:spring-security-web:6.3.5'
 
     // non-pinned security dependencies
-    implementation 'org.owasp.encoder:encoder:1.2'
+    implementation 'org.owasp.encoder:encoder:1.3.1'
 
     // data layer dependencies
     implementation 'org.springframework.boot:spring-boot-starter-data-jpa'
diff --git a/backend/gradle.lockfile b/backend/gradle.lockfile
index 62fa0dfea9..1aa2f48341 100644
--- a/backend/gradle.lockfile
+++ b/backend/gradle.lockfile
@@ -177,7 +177,7 @@ org.json:json:20231013=compileClasspath,runtimeClasspath
 org.liquibase:liquibase-core:4.29.1=compileClasspath,runtimeClasspath
 org.openapitools:jackson-databind-nullable:0.2.6=compileClasspath,runtimeClasspath
 org.ow2.asm:asm:9.6=compileClasspath,runtimeClasspath
-org.owasp.encoder:encoder:1.2=compileClasspath,runtimeClasspath
+org.owasp.encoder:encoder:1.3.1=compileClasspath,runtimeClasspath
 org.postgresql:postgresql:42.7.4=compileClasspath,runtimeClasspath
 org.projectlombok:lombok:1.18.36=compileClasspath
 org.reactivestreams:reactive-streams:1.0.4=compileClasspath,runtimeClasspath