diff --git a/pom.xml b/pom.xml
index cfc2907..ade01d8 100644
--- a/pom.xml
+++ b/pom.xml
@@ -35,6 +35,11 @@
         <!-- JaCoCo -->
         <jacoco.version>0.8.13</jacoco.version>
         <jacoco.minimum.coverage>1.00</jacoco.minimum.coverage>
+        <!-- Security overrides (2026-06-12) — fixes 10 HIGH + 18 MEDIUM Snyk SCA findings -->
+        <spring-framework.version>7.0.8</spring-framework.version>
+        <tomcat.version>11.0.22</tomcat.version>
+        <spring-data-bom.version>2025.1.6</spring-data-bom.version>
+        <postgresql.version>42.7.11</postgresql.version>
     </properties>
 
     <dependencyManagement>