diff --git a/onebusaway-nyc-vehicle-tracking-webapp/pom.xml b/onebusaway-nyc-vehicle-tracking-webapp/pom.xml
index 1016b4131..562b6ac43 100644
--- a/onebusaway-nyc-vehicle-tracking-webapp/pom.xml
+++ b/onebusaway-nyc-vehicle-tracking-webapp/pom.xml
@@ -66,7 +66,7 @@
         <dependency>
             <groupId>commons-fileupload</groupId>
             <artifactId>commons-fileupload</artifactId>
-            <version>1.2.2</version>
+            <version>1.5</version>
         </dependency>
         <dependency>
             <groupId>commons-io</groupId>