diff --git a/CHANGELOG.md b/CHANGELOG.md
index 6026a5d242..c6fe022f3b 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -43,6 +43,10 @@ to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
 - Parts autocomplete API now is case insensitive when using "startWith" parameter
 - changed mapping for manufacturerName when syncing assets_as_planned so it is being resolved when assets are resolved
 - Behaviour of auto complete toggle selections
+- Updated springboot version from 3.1.3 to 3.1.6
+- updated spring core version from 6.0.13 to 6.0.14
+- Update tomcat-embed-websocket from 10.0.15 to 10.0.16
+- Update logback-classic and logback-core version to 1.4.14 to mitigate high finding
 
 ### Removed
 - removed asset filters ( qualityInvestigationIdsInStatusActive, qualityInvestigationIdsInStatusActive )
diff --git a/pom.xml b/pom.xml
index f030d71f14..4770b31553 100644
--- a/pom.xml
+++ b/pom.xml
@@ -38,8 +38,8 @@ SPDX-License-Identifier: Apache-2.0
     </modules>
 
     <properties>
-        <springboot.version>3.1.3</springboot.version>
-        <spring-core.version>6.0.13</spring-core.version>
+        <springboot.version>3.1.6</springboot.version>
+        <spring-core.version>6.0.14</spring-core.version>
         <spring-security-config.version>6.1.3</spring-security-config.version>
         <java.version>17</java.version>
         <maven.compiler.source>${java.version}</maven.compiler.source>
diff --git a/tx-backend/pom.xml b/tx-backend/pom.xml
index 9a54d1d340..9f950c2f42 100644
--- a/tx-backend/pom.xml
+++ b/tx-backend/pom.xml
@@ -50,9 +50,8 @@ SPDX-License-Identifier: Apache-2.0
     <!-- https://mvnrepository.com/artifact/org.eclipse.jetty.websocket/websocket-parent -->
 
 
-
     <dependencies>
-                <!-- IRS Client for decentral registry approach -->
+        <!-- IRS Client for decentral registry approach -->
         <dependency>
             <groupId>org.eclipse.tractusx.irs</groupId>
             <artifactId>irs-registry-client</artifactId>
@@ -63,6 +62,10 @@ SPDX-License-Identifier: Apache-2.0
                     <groupId>org.eclipse.jetty</groupId>
                     <artifactId>jetty-http</artifactId>
                 </exclusion>
+                <exclusion>
+                    <groupId>org.apache.tomcat.embed</groupId>
+                    <artifactId>tomcat-embed-websocket</artifactId>
+                </exclusion>
             </exclusions>
         </dependency>
 
@@ -186,25 +189,16 @@ SPDX-License-Identifier: Apache-2.0
             <groupId>org.springframework.boot</groupId>
             <artifactId>spring-boot-starter-web</artifactId>
             <exclusions>
-                <exclusion>
-                    <groupId>org.apache.tomcat.embed</groupId>
-                    <artifactId>tomcat-embed-core</artifactId>
-                </exclusion>
                 <exclusion>
                     <groupId>org.apache.tomcat.embed</groupId>
                     <artifactId>tomcat-embed-websocket</artifactId>
                 </exclusion>
             </exclusions>
         </dependency>
-        <dependency>
-            <groupId>org.apache.tomcat.embed</groupId>
-            <artifactId>tomcat-embed-core</artifactId>
-            <version>10.1.15</version>
-        </dependency>
         <dependency>
             <groupId>org.apache.tomcat.embed</groupId>
             <artifactId>tomcat-embed-websocket</artifactId>
-            <version>10.1.15</version>
+            <version>10.1.16</version>
         </dependency>
         <dependency>
             <groupId>org.springframework.cloud</groupId>
@@ -436,6 +430,18 @@ SPDX-License-Identifier: Apache-2.0
             <version>1.1.0</version>
             <scope>test</scope>
         </dependency>
+        <dependency>
+            <groupId>ch.qos.logback</groupId>
+            <artifactId>logback-classic</artifactId>
+            <version>1.4.14</version>
+        </dependency>
+        <dependency>
+            <groupId>ch.qos.logback</groupId>
+            <artifactId>logback-core</artifactId>
+            <version>1.4.14</version>
+        </dependency>
+
+
     </dependencies>
 
     <pluginRepositories>
diff --git a/tx-models/pom.xml b/tx-models/pom.xml
index dfa3edc6f3..6fd890e71e 100644
--- a/tx-models/pom.xml
+++ b/tx-models/pom.xml
@@ -53,26 +53,8 @@ SPDX-License-Identifier: Apache-2.0
             <groupId>org.springframework.boot</groupId>
             <artifactId>spring-boot-starter-web</artifactId>
             <exclusions>
-                <exclusion>
-                    <groupId>org.apache.tomcat.embed</groupId>
-                    <artifactId>tomcat-embed-core</artifactId>
-                </exclusion>
-                <exclusion>
-                    <groupId>org.apache.tomcat.embed</groupId>
-                    <artifactId>tomcat-embed-websocket</artifactId>
-                </exclusion>
             </exclusions>
         </dependency>
-        <dependency>
-            <groupId>org.apache.tomcat.embed</groupId>
-            <artifactId>tomcat-embed-core</artifactId>
-            <version>10.1.15</version>
-        </dependency>
-        <dependency>
-            <groupId>org.apache.tomcat.embed</groupId>
-            <artifactId>tomcat-embed-websocket</artifactId>
-            <version>10.1.15</version>
-        </dependency>
 
         <dependency>
             <groupId>com.fasterxml.jackson.core</groupId>
@@ -90,6 +72,18 @@ SPDX-License-Identifier: Apache-2.0
             <version>${springdoc.version}</version>
         </dependency>
 
+
+        <dependency>
+            <groupId>ch.qos.logback</groupId>
+            <artifactId>logback-classic</artifactId>
+            <version>1.4.14</version>
+        </dependency>
+        <dependency>
+            <groupId>ch.qos.logback</groupId>
+            <artifactId>logback-core</artifactId>
+            <version>1.4.14</version>
+        </dependency>
+
     </dependencies>
 </project>