diff --git a/WORKSPACE b/WORKSPACE
index deb06e9486..14a8de222f 100644
--- a/WORKSPACE
+++ b/WORKSPACE
@@ -60,8 +60,9 @@ git_repository(
 
 git_repository(
     name = "contrib_rules_jvm",
-    tag = "v0.9.0",
-    #tag = "v0.19.0",
+    tag = "v0.19.0",
+    patches = ["//patches:rules_jvm.patch"],
+    patch_args = ["-p1"],
     remote = "https://github.com/bazel-contrib/rules_jvm.git",
 )
 
diff --git a/patches/rules_jvm.patch b/patches/rules_jvm.patch
new file mode 100644
index 0000000000..a68e5fdb44
--- /dev/null
+++ b/patches/rules_jvm.patch
@@ -0,0 +1,14 @@
+diff --git a/java/private/junit5.bzl b/java/private/junit5.bzl
+index 94018e2..a3415c5 100644
+--- a/java/private/junit5.bzl
++++ b/java/private/junit5.bzl
+@@ -90,9 +90,6 @@ def java_junit5_test(
+         jvm_flags = jvm_flags + ["-DJUNIT5_EXCLUDE_ENGINES=%s" % ",".join(exclude_engines)]
+ 
+     security_manager_flag_seen = False
+-    for flag in jvm_flags:
+-        if flag.startswith("-Djava.security.manager="):
+-            security_manager_flag_seen = True
+     if not security_manager_flag_seen:
+         jvm_flags = jvm_flags + ["-Djava.security.manager=allow"]
+