diff --git a/wsit/boms/bom-ext/pom.xml b/wsit/boms/bom-ext/pom.xml
index c3a3142e..fa836a2f 100644
--- a/wsit/boms/bom-ext/pom.xml
+++ b/wsit/boms/bom-ext/pom.xml
@@ -36,17 +36,17 @@
         <xmlrpc-impl.version>1.1.6</xmlrpc-impl.version>
 
         <!-- CQ: #22139 -->
-        <santuario.version>2.3.2</santuario.version>
+        <santuario.version>2.3.4</santuario.version>
         <!-- CQ: #22187 -->
         <slf4j-api.version>1.7.36</slf4j-api.version>
         <!-- CQ: #22186 -->
-        <commons-codec.version>1.15</commons-codec.version>
+        <commons-codec.version>1.16.0</commons-codec.version>
 
         <!-- CQ: #18393 -->
         <stax-utils.version>20070216</stax-utils.version>
 
         <grizzly.version>2.4.4</grizzly.version>
-        <tomcat.coyote.version>9.0.71</tomcat.coyote.version>
+        <tomcat.coyote.version>9.0.82</tomcat.coyote.version>
 
         <jaxws.home.uri>http://eclipse-ee4j.github.io/metro-jax-ws</jaxws.home.uri>
     </properties>
@@ -191,7 +191,7 @@
             <dependency>
                 <groupId>junit</groupId>
                 <artifactId>junit</artifactId>
-                <version>4.12</version>
+                <version>4.13.2</version>
             </dependency>
         </dependencies>
     </dependencyManagement>