diff --git a/CHANGELOG.md b/CHANGELOG.md
index 4c76ace..c82160d 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -2,6 +2,12 @@
 
 A brief description of what changes project contains
 
+## Oct 26, 2026
+
+#### v1.6.3
+
+- Fix: Updated `org.springframework:spring-web` from 7.0.8 to 7.0.9 to resolve Snyk-reported Spring Framework vulnerabilities (resource allocation without limits, XSS, HTTP response splitting, sensitive cookie without Secure attribute). Patch-level bump; no API or dependency changes.
+
 ## Aug 26, 2026
 
 #### v1.6.2
diff --git a/pom.xml b/pom.xml
index ec27095..100309f 100644
--- a/pom.xml
+++ b/pom.xml
@@ -4,7 +4,7 @@
     <modelVersion>4.0.0</modelVersion>
     <groupId>com.contentstack.sdk</groupId>
     <artifactId>utils</artifactId>
-    <version>1.6.2</version>
+    <version>1.6.3</version>
     <packaging>jar</packaging>
     <name>Contentstack-utils</name>
     <description>Java Utils SDK for Contentstack Content Delivery API, Contentstack is a headless CMS</description>
@@ -28,7 +28,7 @@
         <maven-release-plugin.version>2.5.3</maven-release-plugin.version>
         <validation-version>2.0.1.Final</validation-version>
         <json-version>20260522</json-version>
-        <spring-web-version>7.0.8</spring-web-version>
+        <spring-web-version>7.0.9</spring-web-version>
         <org.apache.commons-text>1.15.0</org.apache.commons-text>
     </properties>