diff --git a/pom.xml b/pom.xml
index 19b7899b1..77988e481 100644
--- a/pom.xml
+++ b/pom.xml
@@ -431,7 +431,7 @@
             <!-- commons-compress is in use in the Go extractor -->
             <groupId>org.apache.commons</groupId>
             <artifactId>commons-compress</artifactId>
-            <version>1.21</version>
+            <version>1.26.0</version>
         </dependency>
         <dependency>
             <groupId>org.slf4j</groupId>