diff --git a/pom.xml b/pom.xml
index e17d9597..1705fd8a 100644
--- a/pom.xml
+++ b/pom.xml
@@ -79,7 +79,7 @@
 			<groupId>org.jenkins-ci.plugins</groupId>
 			<artifactId>envinject</artifactId>
 			<!-- 1.90 and earlier vulnerable: https://www.jenkins.io/security/advisory/2018-02-26/ -->
-			<version>1.91</version>
+			<version>2.875.v9b_9e962da_a_ec</version>
 		</dependency>
 		<dependency>
 			<groupId>org.jenkins-ci.plugins</groupId>