diff --git a/spring-web/spring-web.gradle b/spring-web/spring-web.gradle
index 560a0ad3f2..aed2125eac 100644
--- a/spring-web/spring-web.gradle
+++ b/spring-web/spring-web.gradle
@@ -45,7 +45,7 @@ dependencies {
 	optional("org.apache.httpcomponents:httpasyncclient:4.1.4") {
 		exclude group: "commons-logging", module: "commons-logging"
 	}
-	optional("commons-fileupload:commons-fileupload:1.3.3")
+	optional("commons-fileupload:commons-fileupload:1.4")
 	optional("org.synchronoss.cloud:nio-multipart-parser:1.1.0")
 	optional("com.fasterxml.woodstox:woodstox-core:5.2.0") {  // woodstox before aalto
 		exclude group: "stax", module: "stax-api"
diff --git a/spring-webmvc/spring-webmvc.gradle b/spring-webmvc/spring-webmvc.gradle
index 507c7e0bef..929472da70 100644
--- a/spring-webmvc/spring-webmvc.gradle
+++ b/spring-webmvc/spring-webmvc.gradle
@@ -53,7 +53,7 @@ dependencies {
 	testCompile("org.apache.httpcomponents:httpclient:4.5.6") {
 		exclude group: "commons-logging", module: "commons-logging"
 	}
-	testCompile("commons-fileupload:commons-fileupload:1.3.3")
+	testCompile("commons-fileupload:commons-fileupload:1.4")
 	testCompile("commons-io:commons-io:2.5")
 	testCompile("joda-time:joda-time:2.10.1")
 	testCompile("org.mozilla:rhino:1.7.10")