<servlet.version>2.5</servlet.version>
         <slf4j.version>1.7.21</slf4j.version>
         <snakeyaml.version>1.17</snakeyaml.version>
-        <spring.framework.version>4.3.4.RELEASE</spring.framework.version> <!-- orignal 4.0.7.RELEASE 4.1.3.RELEASE-->
+        <spring.framework.version>4.3.15.RELEASE</spring.framework.version> <!-- orignal 4.0.7.RELEASE 4.1.3.RELEASE-->
         <swagger.version>1.5.3</swagger.version>
         <testng.version>6.9.10</testng.version> <!--new 6.9.13.6 still shows blackduck risk -->
         <woodstox.version>4.4.1</woodstox.version>
 
     </parent>
 
     <properties>
-        <spring.version>4.3.4.RELEASE</spring.version>
         <jetty.version>9.3.6.v20151106</jetty.version>
     </properties>
 
 
         <dependency>
             <groupId>org.springframework</groupId>
             <artifactId>spring-websocket</artifactId>
-            <version>4.3.4.RELEASE</version>
+            <version>${spring.framework.version}</version>
         </dependency>
         <dependency>
             <groupId>com.google.code.gson</groupId>
 
         <dependency>
             <groupId>org.springframework</groupId>
             <artifactId>spring-websocket</artifactId>
-            <version>4.3.4.RELEASE</version>
+            <version>${spring.framework.version}</version>
         </dependency>
         <dependency>
             <groupId>com.google.code.gson</groupId>
 
         <mvn.docker.version>0.23.0</mvn.docker.version>
 
         <mockito.all.version>1.10.19</mockito.all.version>
-        <spring.framework.version>4.1.3.RELEASE</spring.framework.version>
+        <spring.framework.version>4.3.15.RELEASE</spring.framework.version>
         <cxf.version>3.1.8</cxf.version>
         <ws.rs.version>2.0.1</ws.rs.version>
         <javax.inject.version>1</javax.inject.version>