diff --git a/pom.xml b/pom.xml
index e17d9597..0e453af0 100644
--- a/pom.xml
+++ b/pom.xml
@@ -79,7 +79,7 @@
 			<groupId>org.jenkins-ci.plugins</groupId>
 			<artifactId>envinject</artifactId>
 			<!-- 1.90 and earlier vulnerable: https://www.jenkins.io/security/advisory/2018-02-26/ -->
-			<version>1.91</version>
+			<version>2.901.v0038b_6471582</version>
 		</dependency>
 		<dependency>
 			<groupId>org.jenkins-ci.plugins</groupId>