diff --git a/logstash-core/benchmarks/build.gradle b/logstash-core/benchmarks/build.gradle
index 7c0dcbc11e3..a1b1012e650 100644
--- a/logstash-core/benchmarks/build.gradle
+++ b/logstash-core/benchmarks/build.gradle
@@ -58,7 +58,7 @@ dependencies {
   implementation "org.openjdk.jmh:jmh-core:$jmh"
   annotationProcessor "org.openjdk.jmh:jmh-generator-annprocess:$jmh"
   implementation 'com.google.guava:guava:24.1.1-jre'
-  implementation 'commons-io:commons-io:2.5'
+  implementation 'commons-io:commons-io:2.13.0'
   runtimeOnly 'joda-time:joda-time:2.8.2'
   api "org.jruby:jruby-core:$jrubyVersion"
 }
diff --git a/tools/benchmark-cli/build.gradle b/tools/benchmark-cli/build.gradle
index 166afcd2b79..98df86066f5 100644
--- a/tools/benchmark-cli/build.gradle
+++ b/tools/benchmark-cli/build.gradle
@@ -54,7 +54,7 @@ dependencies {
   implementation group: 'org.apache.commons', name: 'commons-lang3', version: '3.10'
   implementation group: 'commons-codec', name: 'commons-codec', version: '1.14'
 
-  implementation group: 'commons-io', name: 'commons-io', version: '2.7'
+  implementation group: 'commons-io', name: 'commons-io', version: '2.13.0'
   implementation "com.fasterxml.jackson.core:jackson-core:${jacksonVersion}"
   api "com.fasterxml.jackson.core:jackson-databind:${jacksonDatabindVersion}"
   implementation group: 'org.elasticsearch.client', name: 'elasticsearch-rest-client', version: elasticsearch
diff --git a/tools/dependencies-report/build.gradle b/tools/dependencies-report/build.gradle
index d7f6219a2b6..67995b5c1a7 100644
--- a/tools/dependencies-report/build.gradle
+++ b/tools/dependencies-report/build.gradle
@@ -42,7 +42,7 @@ buildscript {
 }
 
 dependencies {
-  implementation 'commons-io:commons-io:2.6'
+  implementation 'commons-io:commons-io:2.13.0'
   implementation 'org.apache.commons:commons-csv:1.5'
   implementation "com.fasterxml.jackson.core:jackson-core:${jacksonVersion}"
   implementation "com.fasterxml.jackson.core:jackson-databind:${jacksonVersion}"
diff --git a/tools/ingest-converter/build.gradle b/tools/ingest-converter/build.gradle
index 9ed1c05ac36..928413700bb 100644
--- a/tools/ingest-converter/build.gradle
+++ b/tools/ingest-converter/build.gradle
@@ -45,7 +45,7 @@ dependencies {
   implementation 'net.sf.jopt-simple:jopt-simple:4.6'
   implementation "com.fasterxml.jackson.core:jackson-databind:${jacksonDatabindVersion}"
   testImplementation "junit:junit:4.12"
-  testImplementation 'commons-io:commons-io:2.5'
+  testImplementation 'commons-io:commons-io:2.13.0'
 }
 
 javadoc {