diff --git a/build.gradle b/build.gradle
index be00b8d..6df3777 100644
--- a/build.gradle
+++ b/build.gradle
@@ -79,7 +79,7 @@ subprojects {
             implementation("org.apache.tomcat.embed:tomcat-embed-core:11.0.10") {
                 because("versions below 10.1.42 have security vulnerabilities including CVE-2024-56337 - see dependabot #13")
             }
-            implementation("org.apache.commons:commons-lang3:3.18.0") {
+            implementation("org.apache.commons:commons-lang3:3.19.0") {
                 because("versions below 3.18.0 have security vulnerabilities including CVE-2025-48924 - see dependabot #15")
             }
             implementation("io.projectreactor.netty:reactor-netty-http:1.2.9") {