diff --git a/sigstore-java/build.gradle.kts b/sigstore-java/build.gradle.kts
index f3a5d1c0..1761a216 100644
--- a/sigstore-java/build.gradle.kts
+++ b/sigstore-java/build.gradle.kts
@@ -34,7 +34,7 @@ dependencies {
     runtimeOnly("io.grpc:grpc-netty-shaded")
     compileOnly("org.apache.tomcat:annotations-api:6.0.53") // java 9+ only
 
-    implementation("commons-codec:commons-codec:1.17.1")
+    implementation("commons-codec:commons-codec:1.17.2")
     implementation("com.google.code.gson:gson:2.11.0")
     implementation("org.bouncycastle:bcutil-jdk18on:1.79")
     implementation("org.bouncycastle:bcpkix-jdk18on:1.79")