diff --git a/pom.xml b/pom.xml
index 3b5b8c95d7..497f2bbf8b 100644
--- a/pom.xml
+++ b/pom.xml
@@ -98,7 +98,7 @@
     <!-- Avoid warnings about being unable to find jars during site building -->
     <dependency.locations.enabled>false</dependency.locations.enabled>
     <hadoop.version>3.4.1</hadoop.version>
-    <httpcore5.version>5.3</httpcore5.version>
+    <httpcore5.version>5.3.1</httpcore5.version>
     <httpclient5.version>5.4</httpclient5.version>
     <jackrabbit1.version>1.6.5</jackrabbit1.version>
     <!-- Don't use jackrabbit2 2.21.x, it's labeled "unstable". -->