diff --git a/build.gradle b/build.gradle
index bc36fb5..6e03c60 100644
--- a/build.gradle
+++ b/build.gradle
@@ -58,6 +58,11 @@ subprojects {
                         'GHSA-mvh2-crg5-v77c: multiple Netty vulnerabilities, including SPDY zlib header block continues decoded expansion ' +
                         'after maxHeaderSize truncation, fixed in 4.2.16.Final')
             }
+            if (requested.group == 'org.springframework' && requested.name == 'spring-expression'
+                    && requested.version != null && requested.version < '7.0.8') {
+                useVersion('7.0.8')
+                because('GHSA-wxpp-56q6-5pcg: Spring Framework Denial of Service via Unbounded Cache in SpEL')
+            }
         }
     }