diff --git a/CHANGELOG.md b/CHANGELOG.md
index 6434041b038ee..93aef24a46674 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -12,6 +12,7 @@ Inspired from [Keep a Changelog](https://keepachangelog.com/en/1.0.0/)
 - Support for HTTP/2 (server-side) ([#3847](https://github.com/opensearch-project/OpenSearch/pull/3847))
 ### Dependencies
 - Bumps `com.diffplug.spotless` from 6.9.1 to 6.10.0
+- Bumps `xmlbeans` from 5.1.0 to 5.1.1
 
 ### Changed
 - Dependency updates (httpcore, mockito, slf4j, httpasyncclient, commons-codec) ([#4308](https://github.com/opensearch-project/OpenSearch/pull/4308))
diff --git a/plugins/ingest-attachment/build.gradle b/plugins/ingest-attachment/build.gradle
index 86694b9bc9da7..af9485c991f0c 100644
--- a/plugins/ingest-attachment/build.gradle
+++ b/plugins/ingest-attachment/build.gradle
@@ -79,7 +79,7 @@ dependencies {
   api "org.apache.poi:poi:${versions.poi}"
   api "org.apache.poi:poi-ooxml-lite:${versions.poi}"
   api "commons-codec:commons-codec:${versions.commonscodec}"
-  api 'org.apache.xmlbeans:xmlbeans:5.1.0'
+  api 'org.apache.xmlbeans:xmlbeans:5.1.1'
   api 'org.apache.commons:commons-collections4:4.4'
   // MS Office
   api "org.apache.poi:poi-scratchpad:${versions.poi}"
diff --git a/plugins/ingest-attachment/licenses/xmlbeans-5.1.0.jar.sha1 b/plugins/ingest-attachment/licenses/xmlbeans-5.1.0.jar.sha1
deleted file mode 100644
index 85f757b61048c..0000000000000
--- a/plugins/ingest-attachment/licenses/xmlbeans-5.1.0.jar.sha1
+++ /dev/null
@@ -1 +0,0 @@
-3534ab896663e6f6d8a2cf46882d7407641d7a31
\ No newline at end of file
diff --git a/plugins/ingest-attachment/licenses/xmlbeans-5.1.1.jar.sha1 b/plugins/ingest-attachment/licenses/xmlbeans-5.1.1.jar.sha1
new file mode 100644
index 0000000000000..4d1d2ad0807e7
--- /dev/null
+++ b/plugins/ingest-attachment/licenses/xmlbeans-5.1.1.jar.sha1
@@ -0,0 +1 @@
+48a369df0eccb509d46203104e4df9cb00f0f68b
\ No newline at end of file