diff --git a/.trivyignore b/.trivyignore
index 1171799fbe..ca57e18fb4 100644
--- a/.trivyignore
+++ b/.trivyignore
@@ -64,3 +64,7 @@ CVE-2022-1471
 # This vulnerability relates to privilege management using spark-submit, which is outside of the
 # scope of this solution.
 CVE-2023-22946
+
+
+# This vulnerability relates to WebFlex applications, which are not used in Pathling.
+CVE-2024-38821
diff --git a/pom.xml b/pom.xml
index 36979f227b..edfb4a4317 100644
--- a/pom.xml
+++ b/pom.xml
@@ -79,8 +79,8 @@
     <pathling.hadoopVersion>3.3.4</pathling.hadoopVersion>
     <pathling.hadoopMajorVersion>3</pathling.hadoopMajorVersion>
     <pathling.hapiFhirVersion>7.0.2</pathling.hapiFhirVersion>
-    <pathling.springBootVersion>3.2.12</pathling.springBootVersion>
-    <pathling.springSecurityVersion>6.2.8</pathling.springSecurityVersion>
+    <pathling.springBootVersion>3.2.0</pathling.springBootVersion>
+    <pathling.springSecurityVersion>6.2.0</pathling.springSecurityVersion>
     <pathling.antlrVersion>4.9.3</pathling.antlrVersion>
     <pathling.dockerJavaVersion>3.3.4</pathling.dockerJavaVersion>
     <pathling.awsSdkVersion>1.12.603</pathling.awsSdkVersion>