diff --git a/airsonic-main/pom.xml b/airsonic-main/pom.xml
index 053177d9..ce1878f4 100644
--- a/airsonic-main/pom.xml
+++ b/airsonic-main/pom.xml
@@ -148,7 +148,7 @@
         <dependency>
             <groupId>org.apache.commons</groupId>
             <artifactId>commons-dbcp2</artifactId>
-            <version>2.5.0</version>
+            <version>2.7.0</version>
             <!-- this wants to pull in commons-logging v1.2 which conflicts with other dependencies -->
             <exclusions>
                 <exclusion>