diff --git a/pom.xml b/pom.xml
index ed6bc85a1d..bec58d630e 100644
--- a/pom.xml
+++ b/pom.xml
@@ -79,7 +79,7 @@
     <dependency>
       <groupId>commons-codec</groupId>
       <artifactId>commons-codec</artifactId>
-      <version>1.22.1</version>
+      <version>1.23.0</version>
       <optional>true</optional>
     </dependency>
     <dependency>
diff --git a/src/changes/changes.xml b/src/changes/changes.xml
index edb94b38b5..fc6a80359d 100644
--- a/src/changes/changes.xml
+++ b/src/changes/changes.xml
@@ -41,6 +41,7 @@
     <action type="update" dev="ggregory" due-to="Gary Gregory">[test] Bump com.google.guava:guava-testlib from 33.6.0-jre to 33.7.1-jre (#733).</action>
     <action type="update" dev="ggregory" due-to="Gary Gregory">[test] Bump org.easymock:easymock from 5.6.0 to 5.7.0 (#732).</action>
     <action type="update" dev="ggregory" due-to="Gary Gregory">[test] Bump org.apache.commons:commons-lang3 from 3.20.0 to 3.21.0.</action>
+    <action type="update" dev="ggregory" due-to="Gary Gregory">Bump commons-codeccommons-codec from 1.22.1 to 1.23.0.</action>
     <!-- REMOVE -->
     <action type="fix" dev="ggregory" due-to="Gary Gregory">Remove reference to sonatype-snapshots in POM (2026-08-15 f009).</action>
   </release>