diff --git a/pom.xml b/pom.xml
index 6b7ebb6fa..3eaa324f9 100644
--- a/pom.xml
+++ b/pom.xml
@@ -41,6 +41,13 @@
     </scm>
 
     <properties>
+        <!-- Overrides START - to be reviewed regularly -->
+        <!-- Override vulnerable commons-fileupload used by feign-form-spring (via spring-cloud-starter-openfeign) -->
+        <commons-fileupload.version>1.6.0</commons-fileupload.version>
+        <!-- Override commons-lang3 version since 3.17 is vulnerable -->
+        <commons-lang-version>3.20.0</commons-lang-version>
+        <!-- Overrides END -->
+
         <revision>0-SNAPSHOT</revision>
 
         <java.version>17</java.version>
@@ -48,9 +55,6 @@
         as libraries in other projects might be compiled with a different, lower, java version. -->
         <java.client.version>17</java.client.version>
 
-        <!-- Override vulnerable commons-fileupload used by feign-form-spring (via spring-cloud-starter-openfeign) -->
-        <commons-fileupload.version>1.6.0</commons-fileupload.version>
-
         <!-- must be the same as the parent version -->
         <spring.boot.version>3.5.7</spring.boot.version>
         <spring.cloud.version>2025.0.0</spring.cloud.version>
@@ -200,12 +204,18 @@
 
     <dependencyManagement>
         <dependencies>
-            <!-- Override vulnerable commons-fileupload used by feign-form-spring (via spring-cloud-starter-openfeign) -->
+            <!-- Overrides START -->
             <dependency>
                 <groupId>commons-fileupload</groupId>
                 <artifactId>commons-fileupload</artifactId>
                 <version>${commons-fileupload.version}</version>
             </dependency>
+            <dependency>
+                <groupId>org.apache.commons</groupId>
+                <artifactId>commons-lang3</artifactId>
+                <version>${commons-lang-version}</version>
+            </dependency>
+            <!-- Overrides END -->
 
             <!-- Misc -->
             <dependency>