diff --git a/pom.xml b/pom.xml
index 4d6b7858b8a7b..5685a78f31d2c 100644
--- a/pom.xml
+++ b/pom.xml
@@ -188,12 +188,12 @@
     <geronimo-json.version>1.3</geronimo-json.version>
     <batik.version>1.17</batik.version>
     <commons-cli.version>1.4</commons-cli.version>
-    <commons-codec.version>1.15</commons-codec.version>
-    <commons-compress.version>1.26.0</commons-compress.version>
-    <commons-io.version>2.18.0</commons-io.version>
-    <commons-lang3.version>3.11</commons-lang3.version>
+    <commons-codec.version>1.19.0</commons-codec.version>
+    <commons-compress.version>1.28.0</commons-compress.version>
+    <commons-io.version>2.20.0</commons-io.version>
+    <commons-lang3.version>3.18.0</commons-lang3.version>
     <commons-logging.version>1.2</commons-logging.version>
-    <commons-text.version>1.10.0</commons-text.version>
+    <commons-text.version>1.14.0</commons-text.version>
     <geronimo-jaxrs.version>1.1</geronimo-jaxrs.version>
     <asciidoctorj.version>2.5.2</asciidoctorj.version>
     <asciidoctorj-pdf.version>1.6.0</asciidoctorj-pdf.version>
diff --git a/sample-parent/sample-connector/pom.xml b/sample-parent/sample-connector/pom.xml
index b37346a2852e2..19f9c285ba558 100644
--- a/sample-parent/sample-connector/pom.xml
+++ b/sample-parent/sample-connector/pom.xml
@@ -42,7 +42,7 @@
     <dependency>
       <groupId>org.apache.commons</groupId>
       <artifactId>commons-lang3</artifactId>
-      <version>3.12.0</version>
+      <version>3.18.0</version>
     </dependency>
     <dependency>
       <groupId>org.apache.commons</groupId>