diff --git a/gradle.lockfile b/gradle.lockfile
index 0bbbeb02..79dbc500 100644
--- a/gradle.lockfile
+++ b/gradle.lockfile
@@ -6,7 +6,7 @@ com.fasterxml.jackson.core:jackson-core:2.16.2=compileClasspath,runtimeClasspath
 com.fasterxml.jackson.core:jackson-databind:2.16.2=compileClasspath,runtimeClasspath
 com.fasterxml.jackson.datatype:jackson-datatype-jdk8:2.16.2=compileClasspath,runtimeClasspath
 com.fasterxml.jackson:jackson-bom:2.16.2=compileClasspath,runtimeClasspath
-commons-codec:commons-codec:1.17.1=compileClasspath,runtimeClasspath
+commons-codec:commons-codec:1.17.2=compileClasspath,runtimeClasspath
 commons-io:commons-io:2.18.0=compileClasspath,runtimeClasspath
 javax.validation:validation-api:2.0.1.Final=compileClasspath,runtimeClasspath
 org.apache.commons:commons-compress:1.27.1=compileClasspath,runtimeClasspath
diff --git a/gradle/libs.versions.toml b/gradle/libs.versions.toml
index b486de1e..06f5ea18 100644
--- a/gradle/libs.versions.toml
+++ b/gradle/libs.versions.toml
@@ -16,7 +16,7 @@ jackson = "2.16.2"
 embulk-util-file = "0.2.0"
 
 commons-compress = "1.27.1"
-commons-codec = "1.17.1"
+commons-codec = "1.17.2"
 commons-io = "2.18.0"
 commons-lang3 = "3.17.0"