diff --git a/gradle/dependencies.gradle b/gradle/dependencies.gradle
index 909bed6a17..468d50fb9d 100644
--- a/gradle/dependencies.gradle
+++ b/gradle/dependencies.gradle
@@ -12,7 +12,7 @@ ext {
   shiroVersion = '1.12.0'
   sspVersion = '1.3.0'
   jjwtVersion = '0.11.5'
-  bouncycastleVersion = '2.73.3'
+  bouncycastleVersion = '2.73.6'
   jettyVersion = '11.0.16'
   luceneVersion = '8.9.0'
 
diff --git a/scm-webapp/build.gradle b/scm-webapp/build.gradle
index 53f4820567..886c3442fe 100644
--- a/scm-webapp/build.gradle
+++ b/scm-webapp/build.gradle
@@ -83,7 +83,11 @@ dependencies {
   implementation libraries.bouncycastleProv
   implementation libraries.bouncycastlePkix
 
-  implementation 'org.pgpainless:pgpainless-core:1.5.0'
+  implementation 'org.pgpainless:pgpainless-core:1.6.7'
+  constraints {
+    implementation 'org.bouncycastle:bcprov-jdk18on:1.78'
+    implementation 'org.bouncycastle:bcpg-jdk18on:1.78'
+  }
 
   // json
   implementation libraries.jacksonJaxbAnnotations