diff --git a/CHANGES.md b/CHANGES.md
index a207303af..0ddec8d9a 100644
--- a/CHANGES.md
+++ b/CHANGES.md
@@ -2,6 +2,9 @@
 
 ## Version 5.0.0 (Not yet released)
 
+* Bump springboot from 2.7.12 to 2.7.17 - Issue #604
+* Bump io.micrometer from 1.9.2 to 1.9.16 - Issue #604
+* Bump io.dropwizard.metrics from 4.2.10 to 4.2.21 - Issue #604
 * Bump jackson-dataformat-yaml from 2.13.5 to 2.15.2 - Issue #602
 * Make locks dynamic based on TTL of lock table - Issue #543
 * Add new repair type parallel_vnode - Issue #554
diff --git a/pom.xml b/pom.xml
index 2e35ef7aa..41943c07a 100644
--- a/pom.xml
+++ b/pom.xml
@@ -59,8 +59,8 @@
 
         <!-- Dependency versions -->
         <io.netty.version>4.1.94.Final</io.netty.version>
-        <io.micrometer.version>1.9.2</io.micrometer.version>
-        <io.dropwizard.metrics.version>4.2.10</io.dropwizard.metrics.version>
+        <io.micrometer.version>1.9.16</io.micrometer.version>
+        <io.dropwizard.metrics.version>4.2.21</io.dropwizard.metrics.version>
         <cassandra.driver.core.version>4.17.0</cassandra.driver.core.version>
         <guava.version>32.0.1-jre</guava.version>
         <caffeine.version>3.1.8</caffeine.version>
@@ -91,7 +91,7 @@
         <jcip.version>1.0</jcip.version>
         <junitparams.version>1.1.1</junitparams.version>
         <equalsverifier.version>3.5</equalsverifier.version>
-        <org.springframework.boot.version>2.7.12</org.springframework.boot.version>
+        <org.springframework.boot.version>2.7.17</org.springframework.boot.version>
         <org.springdoc.openapi-ui.version>1.7.0</org.springdoc.openapi-ui.version>
         <io.prometheus.simpleclient>0.16.0</io.prometheus.simpleclient>
         <jakarta.validation-api.version>2.0.2</jakarta.validation-api.version>