diff --git a/dubbo-dependencies-bom/pom.xml b/dubbo-dependencies-bom/pom.xml
index f52b52ec8dc..d625b9edb6d 100644
--- a/dubbo-dependencies-bom/pom.xml
+++ b/dubbo-dependencies-bom/pom.xml
@@ -152,7 +152,7 @@
     <!-- Fix the bug of log4j refer:https://github.com/apache/logging-log4j2/pull/608 -->
     <log4j2_version>2.24.3</log4j2_version>
     <commons_io_version>2.18.0</commons_io_version>
-    <commons-codec_version>1.17.1</commons-codec_version>
+    <commons-codec_version>1.17.2</commons-codec_version>
     <groovy_version>4.0.24</groovy_version>
 
     <!-- Test libs -->