diff --git a/build.gradle b/build.gradle
index 33fb277206..317956dd50 100644
--- a/build.gradle
+++ b/build.gradle
@@ -120,7 +120,7 @@ subprojects {
     ext {
         bouncyCastleVersion = '1.78.1'
         commonsCodecVersion = '1.17.0'
-        commonsCompressVersion = '1.26.1'
+        commonsCompressVersion = '1.26.2'
         commonsIoVersion = '2.16.1'
         commonsMathVersion = '3.6.1'
         junitVersion = '5.10.2'
diff --git a/build.xml b/build.xml
index 428531bf92..14e361f938 100644
--- a/build.xml
+++ b/build.xml
@@ -333,7 +333,7 @@ under the License.
     <!-- jars in the ooxml-lib directory, see the fetch-ooxml-jars target-->
     <dependency prefix="ooxml.curvesapi" artifact="com.github.virtuald:curvesapi:1.08" usage="ooxml"/>
     <dependency prefix="ooxml.xmlbeans" artifact="org.apache.xmlbeans:xmlbeans:5.2.0" usage="ooxml"/>
-    <dependency prefix="ooxml.commons-compress" artifact="org.apache.commons:commons-compress:1.26.1" usage="ooxml"/>
+    <dependency prefix="ooxml.commons-compress" artifact="org.apache.commons:commons-compress:1.26.2" usage="ooxml"/>
     <dependency prefix="ooxml.commons-lang3" artifact="org.apache.commons:commons-lang3:3.12.0" usage="ooxml"/>
 
     <!-- jars in the ooxml-test-lib directory, see the fetch-ooxml-jars target-->