diff --git a/build/cqs.tsv b/build/cqs.tsv
index 06e39308cac1..aa94d96180b9 100644
--- a/build/cqs.tsv
+++ b/build/cqs.tsv
@@ -318,7 +318,7 @@ org.apache.spark:spark-core_2.12	3.5.0	provided
 org.apache.spark:spark-sql_2.12	3.5.0	provided
 org.scala-lang:scala-compiler	2.12.19	provided
 org.slf4j:slf4j-reload4j	1.7.36	provided
-org.springframework.security:spring-security-core	5.8.14	provided
+org.springframework.security:spring-security-core	5.8.15	provided
 software.amazon.awssdk.crt:aws-crt	0.29.18	provided
 software.amazon.awssdk:s3-transfer-manager	2.25.64	provided
 software.amazon.awssdk:s3	2.25.64	provided
diff --git a/docs/user/upgrade.rst b/docs/user/upgrade.rst
index 8dbf9d534861..91d735f16738 100644
--- a/docs/user/upgrade.rst
+++ b/docs/user/upgrade.rst
@@ -90,6 +90,16 @@ Compatibility Matrix
 | Dependencies | N     | N     | Y     |
 +--------------+-------+-------+-------+
 
+Version 5.2.0 Upgrade Guide
++++++++++++++++++++++++++++
+
+Dependency Version Upgrades
+---------------------------
+
+The following dependencies have been upgraded:
+
+* spring-security ``5.8.14`` -> ``5.8.15``
+
 Version 5.1.0 Upgrade Guide
 +++++++++++++++++++++++++++
 
diff --git a/pom.xml b/pom.xml
index 8ff19c1cce8b..2683e3301e56 100644
--- a/pom.xml
+++ b/pom.xml
@@ -102,7 +102,7 @@
         <rhino.js.version>1.7.14</rhino.js.version>
         <s2.geometry.version>1.0.1</s2.geometry.version>
         <sizeof.version>0.4.3</sizeof.version>
-        <spring.security.version>5.8.14</spring.security.version> <!-- geoserver is still on 5.x -->
+        <spring.security.version>5.8.15</spring.security.version> <!-- geoserver is still on 5.x -->
         <typesafe.config.version>1.4.3</typesafe.config.version>
 
         <!-- standardized transitive dependencies -->