diff --git a/build-tools/owasp/suppressions.xml b/build-tools/owasp/suppressions.xml
index 9d2f12c8536..4330c57685d 100644
--- a/build-tools/owasp/suppressions.xml
+++ b/build-tools/owasp/suppressions.xml
@@ -25,4 +25,11 @@
      <packageUrl regex="true">^pkg:maven/org\.eclipse\.jetty/jetty-server@.*$</packageUrl>
      <vulnerabilityName>CVE-2024-8184</vulnerabilityName>
   </suppress>
+  <suppress until="2025-01-22Z">
+    <notes><![CDATA[
+        The use of spring-web in the JCL does not accept byte[] input data
+    ]]></notes>
+     <packageUrl regex="true">^pkg:maven/org\.springframework\..*@.*$</packageUrl>
+     <vulnerabilityName>CVE-2024-38828</vulnerabilityName>
+  </suppress>
 </suppressions>
diff --git a/spring/pom.xml b/spring/pom.xml
index d20ff757746..d9dc152dcc6 100644
--- a/spring/pom.xml
+++ b/spring/pom.xml
@@ -100,7 +100,7 @@
     <dependency>
       <groupId>org.springframework</groupId>
       <artifactId>spring-web</artifactId>
-      <version>6.1.14</version>
+      <version>6.2.0</version>
       <scope>provided</scope>
     </dependency>
   </dependencies>