diff --git a/core/Dockerfile b/core/Dockerfile
index cd3e83fc8e..71efb0e5ba 100644
--- a/core/Dockerfile
+++ b/core/Dockerfile
@@ -1,6 +1,6 @@
 FROM mapfish_print_builder AS builder
 
-FROM tomcat:9.0.91-jdk11-temurin-jammy AS runner
+FROM tomcat:9.0.93-jdk11-temurin-jammy AS runner
 LABEL maintainer="Camptocamp <info@camptocamp.com>"
 
 RUN --mount=type=cache,target=/var/cache,sharing=locked \
diff --git a/core/build.gradle b/core/build.gradle
index b2decb12d6..1cd66a7f5e 100644
--- a/core/build.gradle
+++ b/core/build.gradle
@@ -126,32 +126,32 @@ configurations {
 
 dependencies {
     implementation(
-            "org.springframework:spring-context:5.3.37",
-            "org.springframework:spring-web:5.3.37",
-            "org.springframework:spring-webmvc:5.3.37",
-            "org.springframework.security:spring-security-config:5.8.13",
-            "org.springframework.security:spring-security-web:5.8.13",
+            "org.springframework:spring-context:5.3.39",
+            "org.springframework:spring-web:5.3.39",
+            "org.springframework:spring-webmvc:5.3.39",
+            "org.springframework.security:spring-security-config:5.8.14",
+            "org.springframework.security:spring-security-web:5.8.14",
             'com.thetransactioncompany:cors-filter:2.10',
             // Hibernate & Postgres
             'org.hibernate:hibernate-core:5.6.15.Final',
-            'org.postgresql:postgresql:42.7.3',
+            'org.postgresql:postgresql:42.7.4',
             'com.vladmihalcea:hibernate-types-52:2.21.1',
             'com.mchange:c3p0:0.10.1',
-            "org.springframework:spring-aspects:5.3.37",
-            "org.springframework:spring-orm:5.3.37",
-            "org.springframework:spring-jdbc:5.3.37",
-            "org.springframework:spring-tx:5.3.37",
-            "org.springframework:spring-test:5.3.37",
+            "org.springframework:spring-aspects:5.3.39",
+            "org.springframework:spring-orm:5.3.39",
+            "org.springframework:spring-jdbc:5.3.39",
+            "org.springframework:spring-tx:5.3.39",
+            "org.springframework:spring-test:5.3.39",
             "javax.media:jai-core:1.1.3"
     )
     metrics(
-            "io.dropwizard.metrics:metrics-core:4.2.26",
-            "io.dropwizard.metrics:metrics-servlet:4.2.26",
-            "io.dropwizard.metrics:metrics-httpclient:4.2.26",
-            "io.dropwizard.metrics:metrics-servlets:4.2.26",
-            "io.dropwizard.metrics:metrics-jvm:4.2.26",
-            "io.dropwizard.metrics:metrics-jmx:4.2.26",
-            "io.dropwizard.metrics:metrics-logback:4.2.26",
+            "io.dropwizard.metrics:metrics-core:4.2.27",
+            "io.dropwizard.metrics:metrics-servlet:4.2.27",
+            "io.dropwizard.metrics:metrics-httpclient:4.2.27",
+            "io.dropwizard.metrics:metrics-servlets:4.2.27",
+            "io.dropwizard.metrics:metrics-jvm:4.2.27",
+            "io.dropwizard.metrics:metrics-jmx:4.2.27",
+            "io.dropwizard.metrics:metrics-logback:4.2.27",
     )
     geotools(
             "org.geotools:gt-epsg-hsql:30.2",
@@ -173,17 +173,17 @@ dependencies {
     )
     implementation(
             'com.google.guava:guava:33.0.0-jre',
-            "org.slf4j:slf4j-api:2.0.13",
-            "org.slf4j:jcl-over-slf4j:2.0.13",
-            "org.slf4j:jul-to-slf4j:2.0.13",
-            "ch.qos.logback:logback-classic:1.5.6",
+            "org.slf4j:slf4j-api:2.0.16",
+            "org.slf4j:jcl-over-slf4j:2.0.16",
+            "org.slf4j:jul-to-slf4j:2.0.16",
+            "ch.qos.logback:logback-classic:1.5.7",
             "ch.qos.logback:logback-access:1.4.14",
             'org.json:json:20240303',
             'org.yaml:snakeyaml:2.2',
             'com.github.spullara.cli-parser:cli-parser:1.1.6',
             'org.apache.httpcomponents:httpclient:4.5.14',
             'com.sun.mail:javax.mail:1.6.2',
-            'com.amazonaws:aws-java-sdk-s3:1.12.767',
+            'com.amazonaws:aws-java-sdk-s3:1.12.770',
             'com.adobe.xmp:xmpcore:6.1.11',
             'io.sentry:sentry-logback:7.5.0',
             'net.logstash.logback:logstash-logback-encoder:8.0',
diff --git a/docs/build.gradle b/docs/build.gradle
index 76f77acef4..5f676ace12 100644
--- a/docs/build.gradle
+++ b/docs/build.gradle
@@ -17,14 +17,14 @@ repositories {
 dependencies {
     implementation project(':core')
     implementation ("org.codehaus.groovy:groovy-all:3.0.22",
-            "org.springframework:spring-test:5.3.37",
+            "org.springframework:spring-test:5.3.39",
             'org.ccil.cowan.tagsoup:tagsoup:1.2.1',
             'com.samskivert:jmustache:1.16',
             'com.google.guava:guava:33.0.0-jre',
             'commons-io:commons-io:2.15.1',
-            "org.springframework:spring-beans:5.3.37",
-            "org.springframework:spring-web:5.3.37",
-            "org.springframework:spring-context:5.3.37",
+            "org.springframework:spring-beans:5.3.39",
+            "org.springframework:spring-web:5.3.39",
+            "org.springframework:spring-context:5.3.39",
             'javax.servlet:javax.servlet-api:4.0.1'
     )
 }