diff --git a/CHANGELOG.md b/CHANGELOG.md
index 2f55b58fa4..bd9d765978 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -7,6 +7,7 @@ Inspired from [Keep a Changelog](https://keepachangelog.com/en/1.0.0/)
 - Bumps `com.github.jk1.dependency-license-report` from 2.7 to 2.8
 - Bumps `org.junit:junit-bom` from 5.10.2 to 5.10.3
 - Bumps `org.apache.httpcomponents.core5:httpcore5-h2` from 5.2.4 to 5.2.5
+- Bumps `commons-logging:commons-logging` from 1.3.2 to 1.3.3
 
 This section is for maintaining a changelog for all breaking changes for the client that cannot be released in the 2.x line. All other non-breaking changes should be added to [Unreleased 2.x] section.
 
diff --git a/java-client/build.gradle.kts b/java-client/build.gradle.kts
index 6828de2da4..89c6aee7c6 100644
--- a/java-client/build.gradle.kts
+++ b/java-client/build.gradle.kts
@@ -177,7 +177,7 @@ dependencies {
     val jacksonDatabindVersion = "2.17.0"
 
     // Apache 2.0
-    api("commons-logging:commons-logging:1.3.2")
+    api("commons-logging:commons-logging:1.3.3")
     compileOnly("org.opensearch.client", "opensearch-rest-client", opensearchVersion)
     testImplementation("org.hamcrest:hamcrest:2.2")
     testImplementation("com.carrotsearch.randomizedtesting:randomizedtesting-runner:2.8.1") {