diff --git a/build.gradle b/build.gradle
index 2af55c34af..08b59514b6 100644
--- a/build.gradle
+++ b/build.gradle
@@ -108,7 +108,7 @@ subprojects {
 
     ext {
         bouncyCastleVersion = '1.80'
-        commonsCodecVersion = '1.17.2'
+        commonsCodecVersion = '1.18.0'
         commonsCompressVersion = '1.27.1'
         commonsIoVersion = '2.18.0'
         commonsMathVersion = '3.6.1'
diff --git a/build.xml b/build.xml
index 44254cdff7..0eebf4f922 100644
--- a/build.xml
+++ b/build.xml
@@ -263,7 +263,7 @@ under the License.
 
 
     <!-- jars in the /lib directory, see the fetch-jars target-->
-    <dependency prefix="main.commons-codec" artifact="commons-codec:commons-codec:1.17.2" usage="main"/>
+    <dependency prefix="main.commons-codec" artifact="commons-codec:commons-codec:1.18.0" usage="main"/>
     <dependency prefix="main.commons-collections4" artifact="org.apache.commons:commons-collections4:4.4" usage="main"/>
     <dependency prefix="main.commons-math3" artifact="org.apache.commons:commons-math3:3.6.1" usage="main"/>
     <dependency prefix="main.commons-io" artifact="commons-io:commons-io:2.18.0" usage="main"/>