diff --git a/kafka-bom/build.gradle.kts b/kafka-bom/build.gradle.kts
index 1273e04..40e5d89 100644
--- a/kafka-bom/build.gradle.kts
+++ b/kafka-bom/build.gradle.kts
@@ -21,8 +21,8 @@ dependencies {
     api("com.squareup.okio:okio:3.4.0") {
       because("https://nvd.nist.gov/vuln/detail/CVE-2023-3635 in io.confluent:kafka-protobuf-serializer:7.4.0")
     }
-    api("org.apache.commons:commons-compress:1.24.0") {
-      because("https://nvd.nist.gov/vuln/detail/CVE-2023-42503")
+    api("org.apache.commons:commons-compress:1.26.0") {
+      because("https://www.tenable.com/cve/CVE-2024-25710")
     }
 
     api("io.confluent:kafka-streams-avro-serde:$kafkaVersion")