diff --git a/build.gradle b/build.gradle
index 519a1731c1..e793051763 100644
--- a/build.gradle
+++ b/build.gradle
@@ -119,7 +119,7 @@ subprojects {
 
     ext {
         bouncyCastleVersion = '1.78.1'
-        commonsCodecVersion = '1.16.1'
+        commonsCodecVersion = '1.17.0'
         commonsCompressVersion = '1.26.1'
         commonsIoVersion = '2.16.1'
         commonsMathVersion = '3.6.1'
diff --git a/build.xml b/build.xml
index 28f9b47125..866ff49dea 100644
--- a/build.xml
+++ b/build.xml
@@ -263,7 +263,7 @@ under the License.
 
 
     <!-- jars in the /lib directory, see the fetch-jars target-->
-    <dependency prefix="main.commons-codec" artifact="commons-codec:commons-codec:1.16.1" usage="main"/>
+    <dependency prefix="main.commons-codec" artifact="commons-codec:commons-codec:1.17.0" usage="main"/>
     <dependency prefix="main.commons-collections4" artifact="org.apache.commons:commons-collections4:4.4" usage="main"/>
     <dependency prefix="main.commons-math3" artifact="org.apache.commons:commons-math3:3.6.1" usage="main"/>
     <dependency prefix="main.commons-io" artifact="commons-io:commons-io:2.16.1" usage="main"/>
@@ -2571,7 +2571,7 @@ under the License.
         <dependency prefix="spotbugs.bcel" artifact="org.apache.bcel:bcel:6.5.0" usage="${spotbugs.lib}"/>
         <dependency prefix="spotbugs.slf4j-api" artifact="org.slf4j:slf4j-api:2.0.0" usage="${spotbugs.lib}"/>
         <dependency prefix="spotbugs.commons-text" artifact="org.apache.commons:commons-text:1.11.0" usage="${spotbugs.lib}"/>
-        <dependency prefix="spotbugs.commons-codec" artifact="commons-codec:commons-codec:1.16.1" usage="${spotbugs.lib}"/>
+        <dependency prefix="spotbugs.commons-codec" artifact="commons-codec:commons-codec:1.17.0" usage="${spotbugs.lib}"/>
         <dependency prefix="spotbugs.commons-logging" artifact="commons-logging:commons-logging:1.2" usage="${spotbugs.lib}"/>
         <dependency prefix="spotbugs.jcip-annotations" artifact="net.jcip:jcip-annotations:1.0" usage="${spotbugs.lib}"/>
         <dependency prefix="spotbugs.icu4j" artifact="com.ibm.icu:icu4j:68.2" usage="${spotbugs.lib}" target="icu4j-68.2.jar"/>