diff --git a/pom.xml b/pom.xml
index 871212822ba9..8dc5f2ce88a3 100644
--- a/pom.xml
+++ b/pom.xml
@@ -547,7 +547,7 @@
       <dependency>
         <groupId>org.apache.commons</groupId>
         <artifactId>commons-compress</artifactId>
-        <version>1.21</version>
+        <version>1.26.0</version>
       </dependency>
       <dependency>
         <groupId>org.apache.thrift</groupId>