diff --git a/pom.xml b/pom.xml
index 8fb37dc603..7bd7afba01 100644
--- a/pom.xml
+++ b/pom.xml
@@ -142,7 +142,7 @@
         <dependency>
           <groupId>org.apache.commons</groupId>
           <artifactId>commons-compress</artifactId>
-          <version>1.27.1</version>
+          <version>1.28.0</version>
         </dependency>
         <!-- transitive dependency update for CVE-2024-31573 -->
         <dependency>