diff --git a/buildpack.toml b/buildpack.toml
index 6fad08e..61dd510 100644
--- a/buildpack.toml
+++ b/buildpack.toml
@@ -81,16 +81,16 @@ api = "0.7"
     name = "BP_TOMCAT_VERSION"
 
   [[metadata.dependencies]]
-    cpes = ["cpe:2.3:a:apache:tomcat:8.5.95:*:*:*:*:*:*:*"]
+    cpes = ["cpe:2.3:a:apache:tomcat:8.5.96:*:*:*:*:*:*:*"]
     id = "tomcat"
     name = "Apache Tomcat"
-    purl = "pkg:generic/apache-tomcat@8.5.95"
-    sha256 = "2a2274defcb4a4c0c24b5a302898a4a1d0d5f033b31c3547cf1cd6629f33eed2"
-    source = "https://archive.apache.org/dist/tomcat/tomcat-8/v8.5.95/src/apache-tomcat-8.5.95-src.tar.gz"
-    source-sha256 = "ea5f32bdfc58a3145c75cb30fdfc95d3a17698896e1fa1ccf825cb5a9640ccc6"
+    purl = "pkg:generic/apache-tomcat@8.5.96"
+    sha256 = "0307cfb85e58a2ff3d033d464bdc01f03fd5452618b17baf64368b1e6b02e886"
+    source = "https://archive.apache.org/dist/tomcat/tomcat-8/v8.5.96/src/apache-tomcat-8.5.96-src.tar.gz"
+    source-sha256 = "6e436bfa5cdb87d2f67924f170498a78e238511638ad63745bb85e934b0b8d98"
     stacks = ["*"]
-    uri = "https://archive.apache.org/dist/tomcat/tomcat-8/v8.5.95/bin/apache-tomcat-8.5.95.tar.gz"
-    version = "8.5.95"
+    uri = "https://archive.apache.org/dist/tomcat/tomcat-8/v8.5.96/bin/apache-tomcat-8.5.96.tar.gz"
+    version = "8.5.96"
 
     [[metadata.dependencies.licenses]]
       type = "Apache-2.0"