diff --git a/appc-directed-graph/appc-dgraph/provider/pom.xml b/appc-directed-graph/appc-dgraph/provider/pom.xml
index 57f905a..0c34f03 100644
--- a/appc-directed-graph/appc-dgraph/provider/pom.xml
+++ b/appc-directed-graph/appc-dgraph/provider/pom.xml
@@ -79,6 +79,17 @@
             <artifactId>velocity</artifactId>
             <version>1.7</version>
             <scope>test</scope>
+            <exclusions>
+                 <exclusion>
+                      <artifactId>commons-collections</artifactId>
+                      <groupId>commons-collections</groupId>
+                 </exclusion>
+            </exclusions>
+        </dependency>
+        <dependency>
+            <groupId>commons-collections</groupId>
+            <artifactId>commons-collections</artifactId>
+            <version>3.2.2</version>
         </dependency>
 
         <dependency>
diff --git a/appc-directed-graph/dg-loader/pom.xml b/appc-directed-graph/dg-loader/pom.xml
index 9ad7c76..26c459e 100644
--- a/appc-directed-graph/dg-loader/pom.xml
+++ b/appc-directed-graph/dg-loader/pom.xml
@@ -46,7 +46,7 @@
         <java.version.source>1.8</java.version.source>
         <java.version.target>1.8</java.version.target>
         <logback.version>1.2.3</logback.version>
-        <common.collections.version>3.2.1</common.collections.version>
+        <commons.collections.version>3.2.2</commons.collections.version>
         <common.io.version>2.5</common.io.version>
         <jettison.version>1.3.7</jettison.version>
         <licenseDir>${project.parent.parent.basedir}</licenseDir>
diff --git a/appc-directed-graph/pom.xml b/appc-directed-graph/pom.xml
index 567e6e8..ec0aaec 100644
--- a/appc-directed-graph/pom.xml
+++ b/appc-directed-graph/pom.xml
@@ -43,7 +43,7 @@
         <snakeyaml.version>1.12</snakeyaml.version>
         <velocity.version>1.7</velocity.version>
         <jettison.version>1.3.7</jettison.version>
-        <common.collections.version>3.2.1</common.collections.version>
+        <commons.collections.version>3.2.2</commons.collections.version>
         <common.io.version>2.5</common.io.version>
         <tosca.datatype.version>1.1.0</tosca.datatype.version>
         <licenseDir>${project.parent.basedir}</licenseDir>
@@ -92,6 +92,17 @@
                 <groupId>org.apache.velocity</groupId>
                 <artifactId>velocity</artifactId>
                 <version>${velocity.version}</version>
+                <exclusions>
+                     <exclusion>
+                          <artifactId>commons-collections</artifactId>
+                          <groupId>commons-collections</groupId>
+                     </exclusion>
+                </exclusions>
+            </dependency>
+            <dependency>
+                <groupId>commons-collections</groupId>
+                <artifactId>commons-collections</artifactId>
+                <version>{commons.collections.version}</version>
             </dependency>
             <dependency>
                 <groupId>commons-io</groupId>