diff --git a/sda-commons-dependencies/build.gradle b/sda-commons-dependencies/build.gradle
index 95181d636..ebc4cd804 100644
--- a/sda-commons-dependencies/build.gradle
+++ b/sda-commons-dependencies/build.gradle
@@ -214,7 +214,7 @@ dependencies {
     api "io.opentelemetry.instrumentation:opentelemetry-instrumentation-api:2.11.0"
     api "io.opentelemetry.instrumentation:opentelemetry-instrumentation-api-semconv:1.33.6-alpha"
     api "com.squareup.okhttp3:okhttp:4.12.0" // bump from 4.9.3 used in opentelemetry-exporter-otlp-common
-    api 'com.squareup.okio:okio:3.9.1', {
+    api 'com.squareup.okio:okio:3.10.2', {
       because 'CVE-2023-3635 in 3.2.0'
     }