diff --git a/pom.xml b/pom.xml
index a124db45..05cffdcf 100644
--- a/pom.xml
+++ b/pom.xml
@@ -390,7 +390,13 @@ under the License.
               <dependency>
                 <groupId>org.apache.commons</groupId>
                 <artifactId>commons-compress</artifactId>
-                <version>1.25.0</version>
+                <version>1.26.1</version>
+              </dependency>
+              <dependency>
+                <!-- newer version needed by commons-compress -->
+                <groupId>commons-io</groupId>
+                <artifactId>commons-io</artifactId>
+                <version>2.15.1</version>
               </dependency>
               <dependency>
                 <groupId>com.github.luben</groupId>