diff --git a/sigstore-java/build.gradle.kts b/sigstore-java/build.gradle.kts
index fb658712..77bc452b 100644
--- a/sigstore-java/build.gradle.kts
+++ b/sigstore-java/build.gradle.kts
@@ -35,7 +35,7 @@ dependencies {
     runtimeOnly("io.grpc:grpc-netty-shaded")
     compileOnly("org.apache.tomcat:annotations-api:6.0.53") // java 9+ only
 
-    implementation("commons-codec:commons-codec:1.15")
+    implementation("commons-codec:commons-codec:1.16.0")
     implementation("com.google.code.gson:gson:2.10.1")
     implementation("org.bouncycastle:bcutil-jdk18on:1.76")
     implementation("org.bouncycastle:bcpkix-jdk18on:1.76")