diff --git a/openjpa-features/src/main/feature/feature.xml b/openjpa-features/src/main/feature/feature.xml
index dc7e497bd..7a537f2ca 100644
--- a/openjpa-features/src/main/feature/feature.xml
+++ b/openjpa-features/src/main/feature/feature.xml
@@ -25,7 +25,7 @@
         <bundle dependency="true">mvn:org.apache.geronimo.specs/geronimo-annotation_1.0_spec/1.1.1</bundle>
         <bundle dependency="true">mvn:org.apache.geronimo.specs/geronimo-el_1.0_spec/1.0.1</bundle>
         <bundle dependency="true">mvn:org.apache.commons/commons-pool2/2.6.0</bundle>
-        <bundle dependency="true">mvn:org.apache.commons/commons-dbcp2/2.5.0</bundle>
+        <bundle dependency="true">mvn:org.apache.commons/commons-dbcp2/2.6.0</bundle>
         <bundle dependency="true">mvn:commons-collections/commons-collections4/4.3</bundle>
         <bundle dependency="true">mvn:org.apache.servicemix.bundles/org.apache.servicemix.bundles.serp/1.14.1_1</bundle>
         <bundle dependency="true">mvn:org.apache.xbean/xbean-asm7-shaded/4.12</bundle>
diff --git a/pom.xml b/pom.xml
index f4893c4a1..a72a6f454 100644
--- a/pom.xml
+++ b/pom.xml
@@ -1755,7 +1755,7 @@
             <dependency>
                 <groupId>org.apache.commons</groupId>
                 <artifactId>commons-dbcp2</artifactId>
-                <version>2.5.0</version>
+                <version>2.6.0</version>
             </dependency>
             <dependency>
                 <groupId>javax.xml.bind</groupId>