diff --git a/sigstore-java/build.gradle.kts b/sigstore-java/build.gradle.kts
index 4b7e0fe8..8fd1f9de 100644
--- a/sigstore-java/build.gradle.kts
+++ b/sigstore-java/build.gradle.kts
@@ -33,7 +33,7 @@ dependencies {
     runtimeOnly("io.grpc:grpc-netty-shaded")
     compileOnly("org.apache.tomcat:annotations-api:6.0.53") // java 9+ only
 
-    implementation("commons-codec:commons-codec:1.16.1")
+    implementation("commons-codec:commons-codec:1.17.0")
     implementation("com.google.code.gson:gson:2.10.1")
     implementation("org.bouncycastle:bcutil-jdk18on:1.78.1")
     implementation("org.bouncycastle:bcpkix-jdk18on:1.78.1")