diff --git a/fluss-client/src/main/resources/META-INF/NOTICE b/fluss-client/src/main/resources/META-INF/NOTICE
index e3f8548204..fd48d55f48 100644
--- a/fluss-client/src/main/resources/META-INF/NOTICE
+++ b/fluss-client/src/main/resources/META-INF/NOTICE
@@ -8,7 +8,7 @@ This project bundles the following dependencies under the Apache Software Licens
 
 - com.google.code.findbugs:jsr305:1.3.9
 - com.ververica:frocksdbjni:6.20.3-ververica-2.0
-- org.apache.commons:commons-lang3:3.12.0
+- org.apache.commons:commons-lang3:3.18.0
 - org.apache.commons:commons-math3:3.6.1
 - org.lz4:lz4-java:1.8.0
 
diff --git a/fluss-filesystems/fluss-fs-gs/src/main/resources/META-INF/NOTICE b/fluss-filesystems/fluss-fs-gs/src/main/resources/META-INF/NOTICE
index 9dad06025d..4856a00bfd 100644
--- a/fluss-filesystems/fluss-fs-gs/src/main/resources/META-INF/NOTICE
+++ b/fluss-filesystems/fluss-fs-gs/src/main/resources/META-INF/NOTICE
@@ -77,7 +77,7 @@ This project bundles the following dependencies under the Apache Software Licens
 - io.perfmark:perfmark-api:0.26.0
 - org.apache.commons:commons-compress:1.21
 - org.apache.commons:commons-configuration2:2.1.1
-- org.apache.commons:commons-lang3:3.12.0
+- org.apache.commons:commons-lang3:3.18.0
 - org.apache.commons:commons-text:1.4
 - org.apache.hadoop.thirdparty:hadoop-shaded-guava:1.1.1
 - org.apache.hadoop.thirdparty:hadoop-shaded-protobuf_3_7:1.1.1
diff --git a/fluss-filesystems/fluss-fs-hadoop-shaded/src/main/resources/META-INF/NOTICE b/fluss-filesystems/fluss-fs-hadoop-shaded/src/main/resources/META-INF/NOTICE
index c70a87906a..31860ec336 100644
--- a/fluss-filesystems/fluss-fs-hadoop-shaded/src/main/resources/META-INF/NOTICE
+++ b/fluss-filesystems/fluss-fs-hadoop-shaded/src/main/resources/META-INF/NOTICE
@@ -20,7 +20,7 @@ This project bundles the following dependencies under the Apache Software Licens
 - commons-logging:commons-logging:1.1.3
 - org.apache.commons:commons-compress:1.21
 - org.apache.commons:commons-configuration2:2.1.1
-- org.apache.commons:commons-lang3:3.12.0
+- org.apache.commons:commons-lang3:3.18.0
 - org.apache.commons:commons-text:1.4
 - org.apache.hadoop.thirdparty:hadoop-shaded-guava:1.1.1
 - org.apache.hadoop.thirdparty:hadoop-shaded-protobuf_3_7:1.1.1
diff --git a/fluss-filesystems/fluss-fs-hadoop/src/main/resources/META-INF/NOTICE b/fluss-filesystems/fluss-fs-hadoop/src/main/resources/META-INF/NOTICE
index 8200edf793..be85f02119 100644
--- a/fluss-filesystems/fluss-fs-hadoop/src/main/resources/META-INF/NOTICE
+++ b/fluss-filesystems/fluss-fs-hadoop/src/main/resources/META-INF/NOTICE
@@ -34,7 +34,7 @@ This project bundles the following dependencies under the Apache Software Licens
 - net.minidev:accessors-smart:2.4.7
 - net.minidev:json-smart:2.4.7
 - org.apache.commons:commons-compress:1.21
-- org.apache.commons:commons-lang3:3.12.0
+- org.apache.commons:commons-lang3:3.18.0
 - org.apache.curator:curator-client:4.2.0
 - org.apache.curator:curator-framework:4.2.0
 - org.apache.hadoop.thirdparty:hadoop-shaded-guava:1.1.1
diff --git a/fluss-filesystems/fluss-fs-obs/src/main/resources/META-INF/NOTICE b/fluss-filesystems/fluss-fs-obs/src/main/resources/META-INF/NOTICE
index 767907e959..c55cfdd2fb 100644
--- a/fluss-filesystems/fluss-fs-obs/src/main/resources/META-INF/NOTICE
+++ b/fluss-filesystems/fluss-fs-obs/src/main/resources/META-INF/NOTICE
@@ -25,7 +25,7 @@ This project bundles the following dependencies under the Apache Software Licens
 - org.ini4j:ini4j:0.5.4
 - net.java.dev.jets3t:jets3t:0.9.0
 - org.apache.commons:commons-compress:1.21
-- org.apache.commons:commons-lang3:3.12.0
+- org.apache.commons:commons-lang3:3.18.0
 - org.apache.directory.api:api-asn1-api:1.0.0-M20
 - org.apache.directory.api:api-util:1.0.0-M20
 - org.apache.directory.server:apacheds-i18n:2.0.0-M15
diff --git a/fluss-filesystems/fluss-fs-oss/src/main/resources/META-INF/NOTICE b/fluss-filesystems/fluss-fs-oss/src/main/resources/META-INF/NOTICE
index 4a1287eabb..44e6c9e107 100644
--- a/fluss-filesystems/fluss-fs-oss/src/main/resources/META-INF/NOTICE
+++ b/fluss-filesystems/fluss-fs-oss/src/main/resources/META-INF/NOTICE
@@ -32,7 +32,7 @@ This project bundles the following dependencies under the Apache Software Licens
 - org.ini4j:ini4j:0.5.4
 - net.java.dev.jets3t:jets3t:0.9.0
 - org.apache.commons:commons-compress:1.21
-- org.apache.commons:commons-lang3:3.12.0
+- org.apache.commons:commons-lang3:3.18.0
 - org.apache.directory.api:api-asn1-api:1.0.0-M20
 - org.apache.directory.api:api-util:1.0.0-M20
 - org.apache.directory.server:apacheds-i18n:2.0.0-M15
diff --git a/fluss-filesystems/fluss-fs-s3/src/main/resources/META-INF/NOTICE b/fluss-filesystems/fluss-fs-s3/src/main/resources/META-INF/NOTICE
index 45b65bd556..c11f7da1e0 100644
--- a/fluss-filesystems/fluss-fs-s3/src/main/resources/META-INF/NOTICE
+++ b/fluss-filesystems/fluss-fs-s3/src/main/resources/META-INF/NOTICE
@@ -26,7 +26,7 @@ This project bundles the following dependencies under the Apache Software Licens
 - joda-time:joda-time:2.8.1
 - org.apache.commons:commons-compress:1.21
 - org.apache.commons:commons-configuration2:2.1.1
-- org.apache.commons:commons-lang3:3.12.0
+- org.apache.commons:commons-lang3:3.18.0
 - org.apache.commons:commons-text:1.4
 - org.apache.hadoop.thirdparty:hadoop-shaded-guava:1.1.1
 - org.apache.hadoop.thirdparty:hadoop-shaded-protobuf_3_7:1.1.1
diff --git a/fluss-server/src/main/resources/META-INF/NOTICE b/fluss-server/src/main/resources/META-INF/NOTICE
index b22f8559d6..fb2b8a3157 100644
--- a/fluss-server/src/main/resources/META-INF/NOTICE
+++ b/fluss-server/src/main/resources/META-INF/NOTICE
@@ -11,7 +11,7 @@ This project bundles the following dependencies under the Apache Software Licens
 - com.google.errorprone:error_prone_annotations:2.10.0
 - com.ververica:frocksdbjni:6.20.3-ververica-2.0
 - commons-cli:commons-cli:1.5.0
-- org.apache.commons:commons-lang3:3.12.0
+- org.apache.commons:commons-lang3:3.18.0
 - org.apache.commons:commons-math3:3.6.1
 - org.lz4:lz4-java:1.8.0
 - org.xerial.snappy:snappy-java:1.1.10.4
diff --git a/pom.xml b/pom.xml
index c412ef95f4..188c9cb254 100644
--- a/pom.xml
+++ b/pom.xml
@@ -402,7 +402,7 @@
             <dependency>
                 <groupId>org.apache.commons</groupId>
                 <artifactId>commons-lang3</artifactId>
-                <version>3.12.0</version>
+                <version>3.18.0</version>
             </dependency>
 
             <dependency>