diff --git a/p27-springboot-log4j/pom.xml b/p27-springboot-log4j/pom.xml
index 63bb803..7630119 100644
--- a/p27-springboot-log4j/pom.xml
+++ b/p27-springboot-log4j/pom.xml
@@ -69,7 +69,7 @@
         <dependency>
             <groupId>com.thoughtworks.xstream</groupId>
             <artifactId>xstream</artifactId>
-            <version>1.4.11.1</version>
+            <version>1.4.17</version>
         </dependency>
 
         <!--log4j2依赖，springboot1.4以上不再支持log4j-->