diff --git a/pom.xml b/pom.xml
index 62cbf4cae6..67cabff220 100644
--- a/pom.xml
+++ b/pom.xml
@@ -383,7 +383,7 @@
       <dependency>
         <groupId>commons-codec</groupId>
         <artifactId>commons-codec</artifactId>
-        <version>1.17.1</version>
+        <version>1.17.2</version>
       </dependency>
       <dependency>
         <groupId>commons-net</groupId>
diff --git a/src/changes/changes.xml b/src/changes/changes.xml
index e157cd5e6a..5f552bad7c 100644
--- a/src/changes/changes.xml
+++ b/src/changes/changes.xml
@@ -370,8 +370,8 @@ The <action> type attribute can be add,update,fix,remove.
       <action type="update" dev="ggregory" due-to="Gary Gregory">
         Bump commons-io:commons-io from 2.11.0 to 2.18.0 #515, #601, #633.
       </action>
-      <action type="update" dev="ggregory" due-to="Gary Gregory">
-        Bump commons-codec:commons-codec from 1.15 to 1.17.1 #480, #530, #567.
+      <action type="update" dev="ggregory" due-to="Gary Gregory, Dependabot">
+        Bump commons-codec:commons-codec from 1.15 to 1.17.2 #480, #530, #567.
       </action>
       <action type="update" dev="ggregory" due-to="Gary Gregory">
         Bump org.apache.commons:commons-lang3 from 3.12.0 to 3.17.0 #568, #577, #594.