diff --git a/dependency-bundles/bom/pom.xml b/dependency-bundles/bom/pom.xml
index 64d4176f8..d4e07e3d0 100644
--- a/dependency-bundles/bom/pom.xml
+++ b/dependency-bundles/bom/pom.xml
@@ -54,7 +54,7 @@
 		<findbugs-jsr305.version>3.0.2</findbugs-jsr305.version>
 		<!-- @Nonnull/@Nullable annotations -->
 		<vavr.version>0.10.6</vavr.version>
-		<guava.version>33.4.0-jre</guava.version>
+		<guava.version>33.4.5-jre</guava.version>
 		<!-- collection utilities, @Beta annotation -->
 		<commons-io.version>2.18.0</commons-io.version>
 		<!-- Apache file utils -->
@@ -270,7 +270,7 @@
 			<dependency>
 				<groupId>com.google.errorprone</groupId>
 				<artifactId>error_prone_annotations</artifactId>
-				<version>2.36.0</version>
+				<version>2.37.0</version>
 			</dependency>
 		</dependencies>
 	</dependencyManagement>
diff --git a/pom.xml b/pom.xml
index b3c3b0736..aa1541ac1 100644
--- a/pom.xml
+++ b/pom.xml
@@ -94,7 +94,7 @@
 		<!-- Spring dependencies -->
 		<!-- Keep these versions consistent with the ones from the SAP Java Buildpack (after their 2.0 release) -->
 		<!-- see https://github.wdf.sap.corp/xs2-java/xs-java-buildpack/blob/master/resources/pom.xml -->
-		<spring.version>6.2.4</spring.version>
+		<spring.version>6.2.5</spring.version>
 		<spring-security.version>6.1.5</spring-security.version>
 		<slf4j.version>2.0.17</slf4j.version>
 		<assertj-core.version>3.27.3</assertj-core.version>