diff --git a/spring-boot-project/spring-boot-dependencies/build.gradle b/spring-boot-project/spring-boot-dependencies/build.gradle
index 8c59d5cf6d63..78614383e73b 100644
--- a/spring-boot-project/spring-boot-dependencies/build.gradle
+++ b/spring-boot-project/spring-boot-dependencies/build.gradle
@@ -348,7 +348,7 @@ bom {
 			]
 		}
 	}
-	library("Glassfish JAXB", "2.3.5") {
+	library("Glassfish JAXB", "2.3.6") {
 		prohibit("[3.0.0-M1,)") {
 			because "it uses the jakarta.* namespace"
 		}