diff --git a/.classpath b/.classpath
index 7dfedc818c..b953470841 100644
--- a/.classpath
+++ b/.classpath
@@ -34,7 +34,7 @@
 	<classpathentry kind="lib" path="ooxml-testlib/guava.jar"/>
 	<classpathentry kind="lib" path="ooxml-testlib/javassist.jar"/>
 	<classpathentry exported="true" kind="lib" path="compile-lib/xmlsec-2.1.0.jar"/>
-	<classpathentry exported="true" kind="lib" path="lib/commons-codec-1.11.jar"/>
+	<classpathentry exported="true" kind="lib" path="lib/commons-codec-1.12.jar"/>
 	<classpathentry exported="true" kind="lib" path="lib/commons-logging-1.2.jar"/>
 	<classpathentry exported="true" kind="lib" path="lib/commons-collections4-4.3.jar"/>
 	<classpathentry kind="lib" path="lib/commons-math3-3.6.1.jar"/>
diff --git a/build.gradle b/build.gradle
index 66d800bbe2..04341a114f 100644
--- a/build.gradle
+++ b/build.gradle
@@ -178,7 +178,7 @@ project('main') {
     sourceSets.test.java.srcDirs = ['../../src/testcases']
 
     dependencies {
-        compile 'commons-codec:commons-codec:1.11'
+        compile 'commons-codec:commons-codec:1.12'
         compile 'commons-logging:commons-logging:1.2'
         compile 'org.apache.commons:commons-collections4:4.3'
         compile 'org.apache.commons:commons-math3:3.6.1'
diff --git a/build.xml b/build.xml
index 8bfd20a69d..72c79fb566 100644
--- a/build.xml
+++ b/build.xml
@@ -172,9 +172,9 @@ under the License.
     <property name="main.commons-logging.jar" location="${main.lib}/commons-logging-1.2.jar"/>
     <property name="main.commons-logging.url"
               value="${repository.m2}/maven2/commons-logging/commons-logging/1.2/commons-logging-1.2.jar"/>
-    <property name="main.commons-codec.jar" location="${main.lib}/commons-codec-1.11.jar"/>
+    <property name="main.commons-codec.jar" location="${main.lib}/commons-codec-1.12.jar"/>
     <property name="main.commons-codec.url"
-              value="${repository.m2}/maven2/commons-codec/commons-codec/1.11/commons-codec-1.11.jar"/>
+              value="${repository.m2}/maven2/commons-codec/commons-codec/1.12/commons-codec-1.12.jar"/>
     <property name="main.log4j.jar" location="${main.lib}/log4j-1.2.17.jar"/>
     <property name="main.log4j.url" value="${repository.m2}/maven2/log4j/log4j/1.2.17/log4j-1.2.17.jar"/>
     <property name="main.junit.jar" location="${main.lib}/junit-4.12.jar"/>
@@ -645,6 +645,7 @@ under the License.
                 <include name="commons-codec-1.5*"/>
                 <include name="commons-codec-1.9*"/>
                 <include name="commons-codec-1.10*"/>
+                <include name="commons-codec-1.11*"/>
                 <include name="commons-compress-1.16*"/>
                 <include name="commons-compress-1.17*"/>
                 <include name="commons-collections4-4.1*"/>
diff --git a/maven/poi.pom b/maven/poi.pom
index b276b2aecc..04dfa8cb9f 100644
--- a/maven/poi.pom
+++ b/maven/poi.pom
@@ -76,7 +76,7 @@
     <dependency>
       <groupId>commons-codec</groupId>
       <artifactId>commons-codec</artifactId>
-      <version>1.11</version>
+      <version>1.12</version>
     </dependency>
     <dependency>
       <groupId>org.apache.commons</groupId>
diff --git a/sonar/main/pom.xml b/sonar/main/pom.xml
index 6391d55ef7..a0e689f39b 100644
--- a/sonar/main/pom.xml
+++ b/sonar/main/pom.xml
@@ -123,7 +123,7 @@
         <dependency>
             <groupId>commons-codec</groupId>
             <artifactId>commons-codec</artifactId>
-            <version>1.11</version>
+            <version>1.12</version>
         </dependency>
         <dependency>
             <groupId>commons-logging</groupId>