diff --git a/spring-boot-project/spring-boot-dependencies/build.gradle b/spring-boot-project/spring-boot-dependencies/build.gradle
index 928d9bd3bd5..44f15037142 100644
--- a/spring-boot-project/spring-boot-dependencies/build.gradle
+++ b/spring-boot-project/spring-boot-dependencies/build.gradle
@@ -342,7 +342,7 @@ bom {
 			]
 		}
 	}
-	library("Glassfish JAXB", "2.3.5") {
+	library("Glassfish JAXB", "2.3.6") {
 		prohibit("[3.0.0-M1,)") {
 			because "it uses the jakarta.* namespace"
 		}